shell32.dll

Description: Windows Shell Common Dll

Version: 10.0.26100.6899

Architecture: 64-bit

Operating System: Windows NT

SHA256: de67bc16e2bdfabdc21a0618b830e263

File Size: 7.3 MB

Uploaded At: May 13, 2026, 10:12 p.m.

Views: 30

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess, WriteProcessMemory

Exported Functions

SHChangeNotifyRegister (Ordinal: 2, Address: 0x193520)
SHDefExtractIconA (Ordinal: 3, Address: 0x202290)
SHChangeNotifyDeregister (Ordinal: 4, Address: 0x19f8c0)
(Ordinal: 5, Address: 0x6d6349)
SHDefExtractIconW (Ordinal: 6, Address: 0x2022b0)
(Ordinal: 7, Address: 0x6d6596)
(Ordinal: 8, Address: 0x6d65a4)
PifMgr_OpenProperties (Ordinal: 9, Address: 0x19e400)
PifMgr_GetProperties (Ordinal: 10, Address: 0x19e400)
PifMgr_SetProperties (Ordinal: 11, Address: 0x19e400)
(Ordinal: 12, Address: 0x2cc860)
PifMgr_CloseProperties (Ordinal: 13, Address: 0x2062b0)
SHStartNetConnectionDialogW (Ordinal: 14, Address: 0x2c31a0)
(Ordinal: 15, Address: 0x201850)
ILFindLastID (Ordinal: 16, Address: 0x201810)
ILRemoveLastID (Ordinal: 17, Address: 0x201930)
ILClone (Ordinal: 18, Address: 0x201750)
ILCloneFirst (Ordinal: 19, Address: 0x201770)
(Ordinal: 20, Address: 0x201750)
ILIsEqual (Ordinal: 21, Address: 0x2018d0)
DAD_DragEnterEx2 (Ordinal: 22, Address: 0x24fa70)
ILIsParent (Ordinal: 23, Address: 0x2018f0)
ILFindChild (Ordinal: 24, Address: 0x2017f0)
ILCombine (Ordinal: 25, Address: 0x201790)
(Ordinal: 26, Address: 0x6d624b)
ILSaveToStream (Ordinal: 27, Address: 0x201950)
SHILCreateFromPath (Ordinal: 28, Address: 0x2028b0)
(Ordinal: 29, Address: 0x201c30)
(Ordinal: 30, Address: 0x6d5c41)
(Ordinal: 31, Address: 0x6d5c7d)
(Ordinal: 32, Address: 0x6d5c27)
(Ordinal: 33, Address: 0x6d5e36)
(Ordinal: 34, Address: 0x6d5c98)
(Ordinal: 35, Address: 0x201d10)
(Ordinal: 36, Address: 0x201b30)
(Ordinal: 37, Address: 0x6d5c68)
(Ordinal: 38, Address: 0x6d5e95)
(Ordinal: 39, Address: 0x6d5d77)
(Ordinal: 40, Address: 0x6d5d2f)
IsLFNDriveA (Ordinal: 41, Address: 0x201a70)
IsLFNDriveW (Ordinal: 42, Address: 0x201a50)
PathIsExe (Ordinal: 43, Address: 0x201c10)
(Ordinal: 44, Address: 0x243860)
(Ordinal: 45, Address: 0x201b70)
(Ordinal: 46, Address: 0x6d5dc3)
PathMakeUniqueName (Ordinal: 47, Address: 0x201cd0)
(Ordinal: 48, Address: 0x6d5e79)
PathQualify (Ordinal: 49, Address: 0x201cf0)
(Ordinal: 50, Address: 0x6d5eac)
PathResolve (Ordinal: 51, Address: 0x201d30)
(Ordinal: 52, Address: 0x6d5cca)
(Ordinal: 53, Address: 0x6d6282)
(Ordinal: 54, Address: 0x2504d0)
(Ordinal: 55, Address: 0x6d5e05)
(Ordinal: 56, Address: 0x6d5ec5)
(Ordinal: 57, Address: 0x6d5cdf)
(Ordinal: 58, Address: 0x201b10)
RestartDialog (Ordinal: 59, Address: 0x2504f0)
(Ordinal: 60, Address: 0x250470)
(Ordinal: 61, Address: 0x27f890)
PickIconDlg (Ordinal: 62, Address: 0x205430)
GetFileNameFromBrowse (Ordinal: 63, Address: 0x27f840)
DriveType (Ordinal: 64, Address: 0x1f4460)
(Ordinal: 65, Address: 0x2019d0)
IsNetDrive (Ordinal: 66, Address: 0x2624c0)
Shell_MergeMenus (Ordinal: 67, Address: 0x202e30)
SHGetSetSettings (Ordinal: 68, Address: 0x2027d0)
(Ordinal: 69, Address: 0x202650)
(Ordinal: 70, Address: 0x204840)
Shell_GetImageLists (Ordinal: 71, Address: 0x202e10)
Shell_GetCachedImageIndex (Ordinal: 72, Address: 0x202db0)
SHShellFolderView_Message (Ordinal: 73, Address: 0x2c1910)
SHCreateStdEnumFmtEtc (Ordinal: 74, Address: 0x202250)
PathYetAnotherMakeUniqueName (Ordinal: 75, Address: 0x201d70)
(Ordinal: 76, Address: 0x201530)
SHMapPIDLToSystemImageListIndex (Ordinal: 77, Address: 0x2029d0)
(Ordinal: 78, Address: 0x6d62c4)
(Ordinal: 79, Address: 0x6d6697)
SHOpenPropSheetW (Ordinal: 80, Address: 0x2cbc40)
OpenAs_RunDLL (Ordinal: 81, Address: 0x1a0c30)
(Ordinal: 82, Address: 0x6d6012)
CIDLData_CreateFromIDArray (Ordinal: 83, Address: 0x5642d0)
(Ordinal: 84, Address: 0x6d6545)
OpenRegStream (Ordinal: 85, Address: 0x201af0)
(Ordinal: 86, Address: 0x6d6611)
(Ordinal: 87, Address: 0x6d661e)
SHDoDragDrop (Ordinal: 88, Address: 0x24fc80)
SHCloneSpecialIDList (Ordinal: 89, Address: 0x201eb0)
SHFindFiles (Ordinal: 90, Address: 0x202390)
(Ordinal: 91, Address: 0x202370)
PathGetShortPath (Ordinal: 92, Address: 0x201bd0)
(Ordinal: 93, Address: 0x6d88e2)
(Ordinal: 94, Address: 0x202ed0)
(Ordinal: 95, Address: 0x202950)
(Ordinal: 96, Address: 0x6d667d)
(Ordinal: 97, Address: 0x19e400)
SHGetRealIDL (Ordinal: 98, Address: 0x202790)
(Ordinal: 99, Address: 0x202c70)
SHRestricted (Ordinal: 100, Address: 0x202ad0)
(Ordinal: 101, Address: 0x6d616c)
SHCoCreateInstance (Ordinal: 102, Address: 0x6d6927)
SignalFileOpen (Ordinal: 103, Address: 0x156600)
(Ordinal: 104, Address: 0x6d60ae)
(Ordinal: 105, Address: 0x6d60fb)
(Ordinal: 106, Address: 0x6d6121)
(Ordinal: 107, Address: 0x6d613a)
(Ordinal: 108, Address: 0x6d6153)
(Ordinal: 109, Address: 0x6d6178)
(Ordinal: 110, Address: 0x6d606e)
(Ordinal: 111, Address: 0x6d619e)
(Ordinal: 112, Address: 0x6d61d1)
(Ordinal: 113, Address: 0x6d607a)
(Ordinal: 114, Address: 0x6d6087)
(Ordinal: 115, Address: 0x6d6061)
(Ordinal: 116, Address: 0x6d61eb)
(Ordinal: 117, Address: 0x6d60ba)
(Ordinal: 118, Address: 0x6d60ee)
IsLFNDrive (Ordinal: 119, Address: 0x201a50)
(Ordinal: 120, Address: 0x6d6047)
(Ordinal: 121, Address: 0x6d647a)
(Ordinal: 122, Address: 0x6d6315)
(Ordinal: 123, Address: 0x6d6494)
(Ordinal: 124, Address: 0x6d6054)
OpenAs_RunDLLA (Ordinal: 125, Address: 0x1a0c30)
(Ordinal: 126, Address: 0x6d65da)
(Ordinal: 127, Address: 0x6d666f)
(Ordinal: 128, Address: 0x44f20)
DAD_AutoScroll (Ordinal: 129, Address: 0x2013d0)
(Ordinal: 130, Address: 0x6d5ff8)
DAD_DragEnterEx (Ordinal: 131, Address: 0x2013f0)
DAD_DragLeave (Ordinal: 132, Address: 0x24fba0)
OpenAs_RunDLLW (Ordinal: 133, Address: 0x210fc0)
DAD_DragMove (Ordinal: 134, Address: 0xbfd90)
PrepareDiscForBurnRunDllW (Ordinal: 135, Address: 0x215310)
DAD_SetDragImage (Ordinal: 136, Address: 0x201410)
DAD_ShowDragImage (Ordinal: 137, Address: 0x201430)
PrintersGetCommand_RunDLL (Ordinal: 138, Address: 0x2226a0)
PrintersGetCommand_RunDLLA (Ordinal: 139, Address: 0x2226a0)
(Ordinal: 140, Address: 0x6d60c7)
(Ordinal: 141, Address: 0x6d60d4)
(Ordinal: 142, Address: 0x6d60e1)
(Ordinal: 143, Address: 0x6d6114)
(Ordinal: 144, Address: 0x6d612d)
(Ordinal: 145, Address: 0x6d5cb2)
(Ordinal: 146, Address: 0x6d6308)
SHCLSIDFromString (Ordinal: 147, Address: 0x201e90)
(Ordinal: 148, Address: 0x6d65b2)
SHFind_InitMenuPopup (Ordinal: 149, Address: 0x2c58e0)
PrintersGetCommand_RunDLLW (Ordinal: 150, Address: 0x222790)
(Ordinal: 151, Address: 0x6d657c)
ILGetSize (Ordinal: 152, Address: 0x2018b0)
ILGetNext (Ordinal: 153, Address: 0x201890)
ILAppendID (Ordinal: 154, Address: 0x201730)
ILFree (Ordinal: 155, Address: 0x201830)
(Ordinal: 156, Address: 0x201830)
ILCreateFromPath (Ordinal: 157, Address: 0x2017b0)
(Ordinal: 158, Address: 0x6d62df)
(Ordinal: 159, Address: 0x6d5d0c)
(Ordinal: 160, Address: 0x2029f0)
(Ordinal: 161, Address: 0x6d662b)
SHSimpleIDListFromPath (Ordinal: 162, Address: 0x202bb0)
(Ordinal: 163, Address: 0x6d668a)
Win32DeleteFile (Ordinal: 164, Address: 0x202eb0)
SHCreateDirectory (Ordinal: 165, Address: 0x201f90)
(Ordinal: 166, Address: 0x6d5f8a)
SHAddFromPropSheetExtArray (Ordinal: 167, Address: 0x290fe0)
SHCreatePropSheetExtArray (Ordinal: 168, Address: 0x291070)
SHDestroyPropSheetExtArray (Ordinal: 169, Address: 0x291260)
SHReplaceFromPropSheetExtArray (Ordinal: 170, Address: 0x2912b0)
PathCleanupSpec (Ordinal: 171, Address: 0x1fa650)
(Ordinal: 172, Address: 0x2020f0)
SHValidateUNC (Ordinal: 173, Address: 0x202c50)
SHCreateShellFolderViewEx (Ordinal: 174, Address: 0x2c1870)
(Ordinal: 175, Address: 0x15fc90)
SHSetInstanceExplorer (Ordinal: 176, Address: 0x262650)
(Ordinal: 177, Address: 0x6d6005)
SHObjectProperties (Ordinal: 178, Address: 0x223ac0)
SHGetNewLinkInfoA (Ordinal: 179, Address: 0x202670)
SHGetNewLinkInfoW (Ordinal: 180, Address: 0x202690)
(Ordinal: 181, Address: 0x289b90)
ShellMessageBoxW (Ordinal: 182, Address: 0x6d866d)
ShellMessageBoxA (Ordinal: 183, Address: 0x6d8643)
(Ordinal: 184, Address: 0x201210)
(Ordinal: 185, Address: 0x6d651b)
(Ordinal: 186, Address: 0x201870)
(Ordinal: 187, Address: 0x6d623d)
(Ordinal: 188, Address: 0x18e980)
ILCreateFromPathA (Ordinal: 189, Address: 0x2017d0)
ILCreateFromPathW (Ordinal: 190, Address: 0x2017b0)
SHUpdateImageA (Ordinal: 191, Address: 0x290e70)
SHUpdateImageW (Ordinal: 192, Address: 0x290e90)
SHHandleUpdateImage (Ordinal: 193, Address: 0x1adc00)
(Ordinal: 194, Address: 0x291080)
SHFree (Ordinal: 195, Address: 0x2023d0)
SHAlloc (Ordinal: 196, Address: 0x201dd0)
(Ordinal: 197, Address: 0x6d650e)
(Ordinal: 198, Address: 0x6d6322)
RealShellExecuteA (Ordinal: 199, Address: 0x201150)
(Ordinal: 200, Address: 0xc3290)
(Ordinal: 201, Address: 0x481d70)
(Ordinal: 202, Address: 0x6d601f)
(Ordinal: 203, Address: 0x2011f0)
(Ordinal: 204, Address: 0x202e50)
(Ordinal: 205, Address: 0x223150)
(Ordinal: 206, Address: 0x481d60)
RealShellExecuteExA (Ordinal: 207, Address: 0x201170)
RealShellExecuteExW (Ordinal: 208, Address: 0x201190)
(Ordinal: 209, Address: 0x201970)
(Ordinal: 210, Address: 0x201ab0)
(Ordinal: 211, Address: 0x223370)
(Ordinal: 212, Address: 0x222ff0)
(Ordinal: 213, Address: 0x223390)
(Ordinal: 214, Address: 0x2234c0)
(Ordinal: 215, Address: 0x2c31a0)
(Ordinal: 216, Address: 0x6d61b7)
(Ordinal: 217, Address: 0x6d61de)
(Ordinal: 218, Address: 0x6d6184)
(Ordinal: 219, Address: 0x6d6191)
(Ordinal: 220, Address: 0x6d6146)
(Ordinal: 221, Address: 0x6d6107)
(Ordinal: 222, Address: 0x6d615f)
(Ordinal: 223, Address: 0x6d61c4)
(Ordinal: 224, Address: 0x6d60a1)
(Ordinal: 225, Address: 0x6d61aa)
RealShellExecuteW (Ordinal: 226, Address: 0x2011b0)
(Ordinal: 227, Address: 0x6d6094)
SHHelpShortcuts_RunDLL (Ordinal: 228, Address: 0x223890)
SHHelpShortcuts_RunDLLA (Ordinal: 229, Address: 0x223890)
(Ordinal: 230, Address: 0x6d61f8)
SHSetFolderPathA (Ordinal: 231, Address: 0x262610)
SHSetFolderPathW (Ordinal: 232, Address: 0x262630)
(Ordinal: 233, Address: 0x6d64f3)
(Ordinal: 234, Address: 0x6d6647)
(Ordinal: 235, Address: 0x6d65bf)
(Ordinal: 236, Address: 0x202c10)
(Ordinal: 237, Address: 0x202b90)
SHHelpShortcuts_RunDLLW (Ordinal: 238, Address: 0x223940)
PathIsSlowW (Ordinal: 239, Address: 0x201c70)
PathIsSlowA (Ordinal: 240, Address: 0x201c50)
(Ordinal: 241, Address: 0x202890)
(Ordinal: 242, Address: 0x6d64cb)
(Ordinal: 243, Address: 0x6d6639)
(Ordinal: 244, Address: 0x202b70)
SHTestTokenMembership (Ordinal: 245, Address: 0x202bf0)
(Ordinal: 246, Address: 0x6d6537)
(Ordinal: 247, Address: 0x6d64a1)
(Ordinal: 248, Address: 0x6d6500)
(Ordinal: 249, Address: 0x6d5dda)
(Ordinal: 250, Address: 0x6d5e50)
(Ordinal: 251, Address: 0x6d5e1e)
(Ordinal: 252, Address: 0x6d5d8a)
(Ordinal: 253, Address: 0x6d6552)
(Ordinal: 254, Address: 0x250450)
AppCompat_RunDLLW (Ordinal: 255, Address: 0x229e00)
SHCreateShellFolderView (Ordinal: 256, Address: 0x99bb0)
(Ordinal: 257, Address: 0x19e400)
(Ordinal: 258, Address: 0x287bf0)
(Ordinal: 259, Address: 0x190590)
(Ordinal: 260, Address: 0x201350)
(Ordinal: 261, Address: 0x2c6500)
(Ordinal: 262, Address: 0x2c6850)
AssocCreateForClasses (Ordinal: 263, Address: 0x1fa240)
(Ordinal: 264, Address: 0x201370)
(Ordinal: 265, Address: 0x202cb0)
(Ordinal: 266, Address: 0x202cd0)
AssocElemCreateForKey (Ordinal: 267, Address: 0x201270)
AssocGetDetailsOfPropKey (Ordinal: 268, Address: 0x1fa2e0)
CallFileCopyHook (Ordinal: 269, Address: 0x235250)
(Ordinal: 270, Address: 0x202ab0)
(Ordinal: 271, Address: 0x2cc900)
CheckEscapesW (Ordinal: 272, Address: 0x2012d0)
CommandLineToArgvW (Ordinal: 273, Address: 0x160590)
Control_RunDLL (Ordinal: 274, Address: 0x2437c0)
Control_RunDLLA (Ordinal: 275, Address: 0x2437c0)
Control_RunDLLAsUserW (Ordinal: 276, Address: 0x243840)
Control_RunDLLW (Ordinal: 277, Address: 0x243880)
DllCanUnloadNow (Ordinal: 278, Address: 0x11b3f0)
DllGetActivationFactory (Ordinal: 279, Address: 0x250e50)
DllGetClassObject (Ordinal: 280, Address: 0x44f20)
DllGetVersion (Ordinal: 281, Address: 0x25b410)
DllInstall (Ordinal: 282, Address: 0x25b4e0)
DllRegisterServer (Ordinal: 283, Address: 0x19e400)
DllUnregisterServer (Ordinal: 284, Address: 0x19e400)
DoEnvironmentSubstA (Ordinal: 285, Address: 0x201450)
DoEnvironmentSubstW (Ordinal: 286, Address: 0x201470)
DragAcceptFiles (Ordinal: 287, Address: 0x201490)
DragFinish (Ordinal: 288, Address: 0x2014b0)
DragQueryFile (Ordinal: 289, Address: 0x2014d0)
DragQueryFileA (Ordinal: 290, Address: 0x2014d0)
DragQueryFileAorW (Ordinal: 291, Address: 0x2014f0)
DragQueryFileW (Ordinal: 292, Address: 0x201510)
DragQueryPoint (Ordinal: 293, Address: 0x201550)
DuplicateIcon (Ordinal: 294, Address: 0x201570)
ExtractAssociatedIconA (Ordinal: 295, Address: 0x201590)
ExtractAssociatedIconExA (Ordinal: 296, Address: 0x2015b0)
ExtractAssociatedIconExW (Ordinal: 297, Address: 0x2015d0)
ExtractAssociatedIconW (Ordinal: 298, Address: 0x2015f0)
ExtractIconA (Ordinal: 299, Address: 0x201610)
ExtractIconEx (Ordinal: 300, Address: 0x201630)
ExtractIconExA (Ordinal: 301, Address: 0x201630)
ExtractIconExW (Ordinal: 302, Address: 0x201650)
ExtractIconW (Ordinal: 303, Address: 0x201670)
FindExecutableA (Ordinal: 304, Address: 0x2016b0)
FindExecutableW (Ordinal: 305, Address: 0x2016d0)
FreeIconList (Ordinal: 306, Address: 0x2016f0)
GetCurrentProcessExplicitAppUserModelID (Ordinal: 307, Address: 0x1adc30)
InitNetworkAddressControl (Ordinal: 308, Address: 0x1a47d0)
InternalExtractIconListA (Ordinal: 309, Address: 0x201990)
InternalExtractIconListW (Ordinal: 310, Address: 0x2019b0)
LaunchMSHelp_RunDLLW (Ordinal: 311, Address: 0x20aa10)
Options_RunDLL (Ordinal: 312, Address: 0x486710)
Options_RunDLLA (Ordinal: 313, Address: 0x486710)
Options_RunDLLW (Ordinal: 314, Address: 0x486770)
RegenerateUserEnvironment (Ordinal: 315, Address: 0x207720)
RunAsNewUser_RunDLLW (Ordinal: 316, Address: 0x20be20)
SHAddDefaultPropertiesByExt (Ordinal: 317, Address: 0x201db0)
SHAddToRecentDocs (Ordinal: 318, Address: 0x1adbe0)
SHAppBarMessage (Ordinal: 319, Address: 0x54f20)
SHAssocEnumHandlers (Ordinal: 320, Address: 0x1fa300)
SHAssocEnumHandlersForProtocolByApplication (Ordinal: 321, Address: 0x1fa3a0)
SHBindToFolderIDListParent (Ordinal: 322, Address: 0x201e10)
SHBindToFolderIDListParentEx (Ordinal: 323, Address: 0x201e30)
SHBindToObject (Ordinal: 324, Address: 0x201e50)
SHBindToParent (Ordinal: 325, Address: 0x201e70)
SHBrowseForFolder (Ordinal: 326, Address: 0x295dc0)
SHBrowseForFolderA (Ordinal: 327, Address: 0x295dc0)
SHBrowseForFolderW (Ordinal: 328, Address: 0x296140)
SHChangeNotify (Ordinal: 329, Address: 0x15f1f0)
SHChangeNotifyRegisterThread (Ordinal: 330, Address: 0x1aa560)
SHChangeNotifySuspendResume (Ordinal: 331, Address: 0x290e50)
SHCoCreateInstanceWorker (Ordinal: 332, Address: 0x6d6974)
SHCreateAssociationRegistration (Ordinal: 333, Address: 0x201ef0)
SHCreateCategoryEnum (Ordinal: 334, Address: 0x298610)
SHCreateDataObject (Ordinal: 335, Address: 0x201f10)
SHCreateDefaultContextMenu (Ordinal: 336, Address: 0x84700)
SHCreateDefaultExtractIcon (Ordinal: 337, Address: 0x201f30)
SHCreateDefaultPropertiesOp (Ordinal: 338, Address: 0x201f50)
SHCreateDirectoryExA (Ordinal: 339, Address: 0x201fb0)
SHCreateDirectoryExW (Ordinal: 340, Address: 0x201fd0)
SHCreateDrvExtIcon (Ordinal: 341, Address: 0x127c80)
SHCreateItemFromIDList (Ordinal: 342, Address: 0x202050)
SHCreateItemFromParsingName (Ordinal: 343, Address: 0x202070)
SHCreateItemFromRelativeName (Ordinal: 344, Address: 0x202090)
SHCreateItemInKnownFolder (Ordinal: 345, Address: 0x2020b0)
SHCreateItemWithParent (Ordinal: 346, Address: 0x2020d0)
SHCreateLocalServerRunDll (Ordinal: 347, Address: 0x19e530)
SHCreateProcessAsUserW (Ordinal: 348, Address: 0x202150)
SHCreateQueryCancelAutoPlayMoniker (Ordinal: 349, Address: 0x2c1090)
SHCreateShellItem (Ordinal: 350, Address: 0x2021f0)
SHCreateShellItemArray (Ordinal: 351, Address: 0x19a770)
SHCreateShellItemArrayFromDataObject (Ordinal: 352, Address: 0x19d0c0)
SHCreateShellItemArrayFromIDLists (Ordinal: 353, Address: 0x202210)
SHCreateShellItemArrayFromShellItem (Ordinal: 354, Address: 0x202230)
SHELL32_AddToBackIconTable (Ordinal: 355, Address: 0x50c00)
SHELL32_AddToFrontIconTable (Ordinal: 356, Address: 0x1a5c20)
SHELL32_AreAllItemsAvailable (Ordinal: 357, Address: 0x18ed60)
SHELL32_CCommonPlacesFolder_CreateInstance (Ordinal: 358, Address: 0x2c2900)
SHELL32_CDBurn_CloseSession (Ordinal: 359, Address: 0x2c2910)
SHELL32_CDBurn_DriveSupportedForDataBurn (Ordinal: 360, Address: 0x2c2920)
SHELL32_CDBurn_Erase (Ordinal: 361, Address: 0x2c2930)
SHELL32_CDBurn_GetCDInfo (Ordinal: 362, Address: 0x1adca0)
SHELL32_CDBurn_GetLiveFSDiscInfo (Ordinal: 363, Address: 0x1e2a00)
SHELL32_CDBurn_GetStagingPathOrNormalPath (Ordinal: 364, Address: 0x1a6240)
SHELL32_CDBurn_GetTaskInfo (Ordinal: 365, Address: 0x2c2940)
SHELL32_CDBurn_IsBlankDisc (Ordinal: 366, Address: 0x2c2950)
SHELL32_CDBurn_IsBlankDisc2 (Ordinal: 367, Address: 0x2c2960)
SHELL32_CDBurn_IsLiveFS (Ordinal: 368, Address: 0x2c29c0)
SHELL32_CDBurn_OnDeviceChange (Ordinal: 369, Address: 0x2c29d0)
SHELL32_CDBurn_OnEject (Ordinal: 370, Address: 0x2c29e0)
SHELL32_CDBurn_OnMediaChange (Ordinal: 371, Address: 0x2c2a60)
SHELL32_CDefFolderMenu_Create2 (Ordinal: 372, Address: 0x2c2a70)
SHELL32_CDefFolderMenu_Create2Ex (Ordinal: 373, Address: 0x184020)
SHELL32_CDefFolderMenu_MergeMenu (Ordinal: 374, Address: 0x1e2ad0)
SHELL32_CDrivesContextMenu_Create (Ordinal: 375, Address: 0x2c2ad0)
SHELL32_CDrivesDropTarget_Create (Ordinal: 376, Address: 0x1a95b0)
SHELL32_CDrives_CreateSFVCB (Ordinal: 377, Address: 0x2c2ae0)
SHELL32_CFSDropTarget_CreateInstance (Ordinal: 378, Address: 0x19c870)
SHELL32_CFSFolderCallback_Create (Ordinal: 379, Address: 0x1aa460)
SHELL32_CFillPropertiesTask_CreateInstance (Ordinal: 380, Address: 0x265e60)
SHELL32_CLibraryDropTarget_CreateInstance (Ordinal: 381, Address: 0x2c2b40)
SHELL32_CLocationContextMenu_Create (Ordinal: 382, Address: 0x1f36e0)
SHELL32_CLocationFolderUI_CreateInstance (Ordinal: 383, Address: 0x2c2b50)
SHELL32_CMountPoint_DoAutorun (Ordinal: 384, Address: 0x2c2b60)
SHELL32_CMountPoint_DoAutorunPrompt (Ordinal: 385, Address: 0x2c2b70)
SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy (Ordinal: 386, Address: 0x1adb90)
SHELL32_CMountPoint_ProcessAutoRunFile (Ordinal: 387, Address: 0x2c2ba0)
SHELL32_CMountPoint_WantAutorunUI (Ordinal: 388, Address: 0x2c2bb0)
SHELL32_CMountPoint_WantAutorunUIGetReady (Ordinal: 389, Address: 0x2c2bc0)
SHELL32_CNetFolderUI_CreateInstance (Ordinal: 390, Address: 0x79ef0)
SHELL32_CPL_CategoryIdArrayFromVariant (Ordinal: 391, Address: 0x1e29f0)
SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey (Ordinal: 392, Address: 0x2c2c20)
SHELL32_CPL_ModifyWowDisplayName (Ordinal: 393, Address: 0x2c2c40)
SHELL32_CRecentDocsContextMenu_CreateInstance (Ordinal: 394, Address: 0x2c2c50)
SHELL32_CTransferConfirmation_CreateInstance (Ordinal: 395, Address: 0x2c2c60)
SHELL32_CallFileCopyHooks (Ordinal: 396, Address: 0x1442a0)
SHELL32_CanDisplayWin8CopyDialog (Ordinal: 397, Address: 0x171ff0)
SHELL32_CloseAutoplayPrompt (Ordinal: 398, Address: 0x2c2c70)
SHELL32_CommandLineFromMsiDescriptor (Ordinal: 399, Address: 0x2c2d20)
SHELL32_CopySecondaryTiles (Ordinal: 400, Address: 0x19e400)
SHELL32_CreateConfirmationInterrupt (Ordinal: 401, Address: 0x2c2d40)
SHELL32_CreateConflictInterrupt (Ordinal: 402, Address: 0x2c2d50)
SHELL32_CreateDefaultOperationDataProvider (Ordinal: 403, Address: 0x2c2d60)
SHELL32_CreateFileFolderContextMenu (Ordinal: 404, Address: 0x2c2e40)
SHELL32_CreateLinkInfoW (Ordinal: 405, Address: 0x17bc90)
SHELL32_CreateQosRecorder (Ordinal: 406, Address: 0x1a3e90)
SHELL32_CreateSharePointView (Ordinal: 407, Address: 0x2c2e50)
SHELL32_Create_IEnumUICommand (Ordinal: 408, Address: 0x2c2e60)
SHELL32_DestroyLinkInfo (Ordinal: 409, Address: 0x186020)
SHELL32_EncryptDirectory (Ordinal: 410, Address: 0x2c2e70)
SHELL32_EncryptedFileKeyInfo (Ordinal: 411, Address: 0x2c2e80)
SHELL32_EnumCommonTasks (Ordinal: 412, Address: 0x2c2ea0)
SHELL32_FreeEncryptedFileKeyInfo (Ordinal: 413, Address: 0x2c2eb0)
SHELL32_GenerateAppID (Ordinal: 414, Address: 0x2c2ed0)
SHELL32_GetAppIDRoot (Ordinal: 415, Address: 0x2c2ee0)
SHELL32_GetCommandProviderForFolderType (Ordinal: 416, Address: 0x2c2ef0)
SHELL32_GetDPIAdjustedLogicalSize (Ordinal: 417, Address: 0x1adbd0)
SHELL32_GetDiskCleanupPath (Ordinal: 418, Address: 0x2c2f10)
SHELL32_GetFileNameFromBrowse (Ordinal: 419, Address: 0x2c2f20)
SHELL32_GetIconOverlayManager (Ordinal: 420, Address: 0xcf350)
SHELL32_GetLinkInfoData (Ordinal: 421, Address: 0x2c2f30)
SHELL32_GetRatingBucket (Ordinal: 422, Address: 0x2c2f50)
SHELL32_GetSqmableFileName (Ordinal: 423, Address: 0x2c2f80)
SHELL32_GetThumbnailAdornerFromFactory (Ordinal: 424, Address: 0x2c2f90)
SHELL32_GetThumbnailAdornerFromFactory2 (Ordinal: 425, Address: 0xb8d30)
SHELL32_HandleUnrecognizedFileSystem (Ordinal: 426, Address: 0x2c2fa0)
SHELL32_IconCacheCreate (Ordinal: 427, Address: 0x2c2fb0)
SHELL32_IconCacheDestroy (Ordinal: 428, Address: 0x19ec20)
SHELL32_IconCacheHandleAssociationChanged (Ordinal: 429, Address: 0x1adc90)
SHELL32_IconCacheRestore (Ordinal: 430, Address: 0x2c2fc0)
SHELL32_IconCache_AboutToExtractIcons (Ordinal: 431, Address: 0x19a610)
SHELL32_IconCache_DoneExtractingIcons (Ordinal: 432, Address: 0x18f390)
SHELL32_IconCache_ExpandEnvAndSearchPath (Ordinal: 433, Address: 0x126e70)
SHELL32_IconCache_RememberRecentlyExtractedIconsW (Ordinal: 434, Address: 0x102e60)
SHELL32_IconOverlayManagerInit (Ordinal: 435, Address: 0x16b440)
SHELL32_IsGetKeyboardLayoutPresent (Ordinal: 436, Address: 0x190590)
SHELL32_IsSystemUpgradeInProgress (Ordinal: 437, Address: 0x138c50)
SHELL32_IsValidLinkInfo (Ordinal: 438, Address: 0x11b460)
SHELL32_LegacyEnumSpecialTasksByType (Ordinal: 439, Address: 0x2c2fd0)
SHELL32_LegacyEnumTasks (Ordinal: 440, Address: 0x2c2fe0)
SHELL32_LookupBackIconIndex (Ordinal: 441, Address: 0x34dc0)
SHELL32_LookupFrontIconIndex (Ordinal: 442, Address: 0x17e1c0)
SHELL32_NormalizeRating (Ordinal: 443, Address: 0x2c2ff0)
SHELL32_NotifyLinkTrackingServiceOfMove (Ordinal: 444, Address: 0x1ac060)
SHELL32_PifMgr_CloseProperties (Ordinal: 445, Address: 0x2062b0)
SHELL32_PifMgr_GetProperties (Ordinal: 446, Address: 0x19e400)
SHELL32_PifMgr_OpenProperties (Ordinal: 447, Address: 0x19e400)
SHELL32_PifMgr_SetProperties (Ordinal: 448, Address: 0x19e400)
SHELL32_Printers_CreateBindInfo (Ordinal: 449, Address: 0x2c3030)
SHELL32_Printjob_GetPidl (Ordinal: 450, Address: 0x2c3040)
SHELL32_PurgeSystemIcon (Ordinal: 451, Address: 0x2c3050)
SHELL32_RefreshOverlayImages (Ordinal: 452, Address: 0x2c3060)
SHELL32_ResolveLinkInfoW (Ordinal: 453, Address: 0x1ad8b0)
SHELL32_SHAddSparseIcon (Ordinal: 454, Address: 0x1a3b40)
SHELL32_SHCreateByValueOperationInterrupt (Ordinal: 455, Address: 0x2c3070)
SHELL32_SHCreateDefaultContextMenu (Ordinal: 456, Address: 0x19a3e0)
SHELL32_SHCreateLocalServer (Ordinal: 457, Address: 0x2c3080)
SHELL32_SHCreateShellFolderView (Ordinal: 458, Address: 0x1adb80)
SHELL32_SHDuplicateEncryptionInfoFile (Ordinal: 459, Address: 0x2c3090)
SHELL32_SHEncryptFile (Ordinal: 460, Address: 0x2c30b0)
SHELL32_SHFormatDriveAsync (Ordinal: 461, Address: 0x2c30c0)
SHELL32_SHGetThreadUndoManager (Ordinal: 462, Address: 0x1f3460)
SHELL32_SHGetUserNameW (Ordinal: 463, Address: 0x2c30d0)
SHELL32_SHIsVirtualDevice (Ordinal: 464, Address: 0x2c30f0)
SHELL32_SHLaunchPropSheet (Ordinal: 465, Address: 0x2c3160)
SHELL32_SHLogILFromFSIL (Ordinal: 466, Address: 0x2c3170)
SHELL32_SHOpenWithDialog (Ordinal: 467, Address: 0x2c3190)
SHELL32_SHStartNetConnectionDialogW (Ordinal: 468, Address: 0x2c31a0)
SHELL32_SHUICommandFromGUID (Ordinal: 469, Address: 0x276c40)
SHELL32_SendToMenu_InvokeTargetedCommand (Ordinal: 470, Address: 0x4876c0)
SHELL32_SendToMenu_VerifyTargetedCommand (Ordinal: 471, Address: 0xf2430)
SHELL32_ShowHideIconOnlyOnDesktop (Ordinal: 472, Address: 0x2c31c0)
SHELL32_SimpleRatingToFilterCondition (Ordinal: 473, Address: 0x2c31d0)
SHELL32_StampIconForFile (Ordinal: 474, Address: 0x1f4030)
SHELL32_SuspendUndo (Ordinal: 475, Address: 0x174cb0)
SHELL32_TryVirtualDiscImageDriveEject (Ordinal: 476, Address: 0x2c31e0)
SHELL32_VerifySaferTrust (Ordinal: 477, Address: 0x1a0200)
SHEmptyRecycleBinA (Ordinal: 478, Address: 0x2c3640)
SHEmptyRecycleBinW (Ordinal: 479, Address: 0x2c36e0)
SHEnableServiceObject (Ordinal: 480, Address: 0x17ee70)
SHEnumerateUnreadMailAccountsW (Ordinal: 481, Address: 0x2022d0)
SHEvaluateSystemCommandTemplate (Ordinal: 482, Address: 0x2022f0)
SHExecuteErrorMessageBox (Ordinal: 483, Address: 0x2c4d80)
SHExtractIconsW (Ordinal: 484, Address: 0x202350)
SHFileOperation (Ordinal: 485, Address: 0x223dc0)
SHFileOperationA (Ordinal: 486, Address: 0x223dc0)
SHFileOperationW (Ordinal: 487, Address: 0x1e2ab0)
SHFormatDrive (Ordinal: 488, Address: 0x22a270)
SHFreeNameMappings (Ordinal: 489, Address: 0x223de0)
SHGetDataFromIDListA (Ordinal: 490, Address: 0x202470)
SHGetDataFromIDListW (Ordinal: 491, Address: 0x202490)
SHGetDesktopFolder (Ordinal: 492, Address: 0x18d0b0)
SHGetDiskFreeSpaceA (Ordinal: 493, Address: 0x2024b0)
SHGetDiskFreeSpaceExA (Ordinal: 494, Address: 0x2024b0)
SHGetDiskFreeSpaceExW (Ordinal: 495, Address: 0x2024d0)
SHGetDriveMedia (Ordinal: 496, Address: 0x2caae0)
SHGetFileInfo (Ordinal: 497, Address: 0x2024f0)
SHGetFileInfoA (Ordinal: 498, Address: 0x2024f0)
SHGetFileInfoW (Ordinal: 499, Address: 0x18c2d0)
SHGetFolderLocation (Ordinal: 500, Address: 0x191fa0)
SHGetFolderPathA (Ordinal: 501, Address: 0x1980e0)
SHGetFolderPathAndSubDirA (Ordinal: 502, Address: 0x262530)
SHGetFolderPathAndSubDirW (Ordinal: 503, Address: 0x1f4790)
SHGetFolderPathEx (Ordinal: 504, Address: 0x18ba60)
SHGetFolderPathW (Ordinal: 505, Address: 0x158770)
SHGetIDListFromObject (Ordinal: 506, Address: 0x202550)
SHGetIconOverlayIndexA (Ordinal: 507, Address: 0x2877b0)
SHGetIconOverlayIndexW (Ordinal: 508, Address: 0xcf220)
SHGetInstanceExplorer (Ordinal: 509, Address: 0x1f4770)
SHGetItemFromDataObject (Ordinal: 510, Address: 0x202590)
SHGetItemFromObject (Ordinal: 511, Address: 0x2025b0)
SHGetKnownFolderIDList (Ordinal: 512, Address: 0x19fae0)
SHGetKnownFolderItem (Ordinal: 513, Address: 0x1b2110)
SHGetKnownFolderPath (Ordinal: 514, Address: 0x141de0)
SHGetLocalizedName (Ordinal: 515, Address: 0x2025d0)
SHGetMalloc (Ordinal: 516, Address: 0x202610)
SHGetNameFromIDList (Ordinal: 517, Address: 0x202630)
SHGetNewLinkInfo (Ordinal: 518, Address: 0x202670)
SHGetPathFromIDList (Ordinal: 519, Address: 0x2026d0)
(Ordinal: 520, Address: 0x6d632f)
(Ordinal: 521, Address: 0x6d6589)
(Ordinal: 522, Address: 0x6d6654)
(Ordinal: 523, Address: 0x6d6487)
RealDriveType (Ordinal: 524, Address: 0x1f4460)
(Ordinal: 525, Address: 0x6d6039)
SHFlushSFCache (Ordinal: 526, Address: 0x2023b0)
SHGetPathFromIDListA (Ordinal: 527, Address: 0x2026d0)
SHGetPathFromIDListEx (Ordinal: 528, Address: 0x202710)
SHGetPathFromIDListW (Ordinal: 529, Address: 0x202730)
SHGetPropertyStoreForWindow (Ordinal: 530, Address: 0x89cc0)
SHGetPropertyStoreFromIDList (Ordinal: 531, Address: 0x202750)
SHGetPropertyStoreFromParsingName (Ordinal: 532, Address: 0x202770)
SHGetSettings (Ordinal: 533, Address: 0x2027f0)
SHGetSpecialFolderLocation (Ordinal: 534, Address: 0x19b2b0)
SHGetSpecialFolderPathA (Ordinal: 535, Address: 0x262550)
SHGetSpecialFolderPathW (Ordinal: 536, Address: 0x15fc90)
SHGetStockIconInfo (Ordinal: 537, Address: 0x202810)
SHGetTemporaryPropertyForItem (Ordinal: 538, Address: 0x202830)
SHGetUnreadMailCountW (Ordinal: 539, Address: 0x202870)
SHInvokePrinterCommandA (Ordinal: 540, Address: 0x2235a0)
SHInvokePrinterCommandW (Ordinal: 541, Address: 0x223690)
SHIsFileAvailableOffline (Ordinal: 542, Address: 0x2028f0)
SHLoadInProc (Ordinal: 543, Address: 0x1f36e0)
SHLoadNonloadedIconOverlayIdentifiers (Ordinal: 544, Address: 0x202930)
SHOpenFolderAndSelectItems (Ordinal: 545, Address: 0x2625b0)
SHOpenOrGetFolderView (Ordinal: 546, Address: 0x2cc290)
SHOpenWithDialog (Ordinal: 547, Address: 0x211ca0)
SHParseDisplayName (Ordinal: 548, Address: 0x202a10)
SHPathPrepareForWriteA (Ordinal: 549, Address: 0x223e20)
SHPathPrepareForWriteW (Ordinal: 550, Address: 0x223e40)
SHQueryRecycleBinA (Ordinal: 551, Address: 0x202a30)
SHQueryRecycleBinW (Ordinal: 552, Address: 0x202a50)
SHQueryUserNotificationState (Ordinal: 553, Address: 0x109cd0)
SHRemoveLocalizedName (Ordinal: 554, Address: 0x202a90)
SHResolveLibrary (Ordinal: 555, Address: 0x2625f0)
SHSetDefaultProperties (Ordinal: 556, Address: 0x202af0)
SHSetKnownFolderPath (Ordinal: 557, Address: 0x262670)
SHSetLocalizedName (Ordinal: 558, Address: 0x202b10)
SHSetTemporaryPropertyForItem (Ordinal: 559, Address: 0x202b30)
SHSetUnreadMailCountW (Ordinal: 560, Address: 0x202b50)
SHShowManageLibraryUI (Ordinal: 561, Address: 0x4ce350)
SHUpdateRecycleBinIcon (Ordinal: 562, Address: 0x202c30)
SetCurrentProcessExplicitAppUserModelID (Ordinal: 563, Address: 0x1e2a90)
SheChangeDirA (Ordinal: 564, Address: 0x2062c0)
SheChangeDirExW (Ordinal: 565, Address: 0x206340)
SheGetDirA (Ordinal: 566, Address: 0x2068c0)
SheSetCurDrive (Ordinal: 567, Address: 0x206b20)
ShellAboutA (Ordinal: 568, Address: 0x2dd2b0)
ShellAboutW (Ordinal: 569, Address: 0x2dd3e0)
ShellExec_RunDLL (Ordinal: 570, Address: 0x202cf0)
ShellExec_RunDLLA (Ordinal: 571, Address: 0x202cf0)
ShellExec_RunDLLW (Ordinal: 572, Address: 0x202d10)
ShellExecuteA (Ordinal: 573, Address: 0x202d30)
ShellExecuteEx (Ordinal: 574, Address: 0x202d50)
ShellExecuteExA (Ordinal: 575, Address: 0x202d50)
ShellExecuteExW (Ordinal: 576, Address: 0x202d70)
ShellExecuteW (Ordinal: 577, Address: 0x202d90)
ShellHookProc (Ordinal: 578, Address: 0x19e400)
Shell_GetCachedImageIndexA (Ordinal: 579, Address: 0x202dd0)
Shell_GetCachedImageIndexW (Ordinal: 580, Address: 0x202df0)
Shell_NotifyIcon (Ordinal: 581, Address: 0x1618b0)
Shell_NotifyIconA (Ordinal: 582, Address: 0x1618b0)
Shell_NotifyIconGetRect (Ordinal: 583, Address: 0x1b6170)
Shell_NotifyIconW (Ordinal: 584, Address: 0x10980)
StateRepoNewMenuCache_EnsureCacheAsync (Ordinal: 585, Address: 0xa03e0)
StateRepoNewMenuCache_RebuildCacheAsync (Ordinal: 586, Address: 0x1a3ed0)
StrChrA (Ordinal: 587, Address: 0x1f7e00)
StrChrIA (Ordinal: 588, Address: 0x1f7e10)
StrChrIW (Ordinal: 589, Address: 0x1f7e20)
StrChrW (Ordinal: 590, Address: 0x1f7e30)
StrCmpNA (Ordinal: 591, Address: 0x1f7e40)
StrCmpNIA (Ordinal: 592, Address: 0x1f7e50)
StrCmpNIW (Ordinal: 593, Address: 0x1f7e60)
StrCmpNW (Ordinal: 594, Address: 0x1f7e70)
StrNCmpA (Ordinal: 595, Address: 0x204900)
StrNCmpIA (Ordinal: 596, Address: 0x2049d0)
StrNCmpIW (Ordinal: 597, Address: 0x204aa0)
StrNCmpW (Ordinal: 598, Address: 0x204b70)
StrRChrA (Ordinal: 599, Address: 0x1f7e80)
StrRChrIA (Ordinal: 600, Address: 0x1f7e90)
StrRChrIW (Ordinal: 601, Address: 0x1f7ea0)
StrRChrW (Ordinal: 602, Address: 0x1f7eb0)
StrRStrA (Ordinal: 603, Address: 0x204c60)
StrRStrIA (Ordinal: 604, Address: 0x1f7ec0)
StrRStrIW (Ordinal: 605, Address: 0x1f7ed0)
StrRStrW (Ordinal: 606, Address: 0x204d40)
StrStrA (Ordinal: 607, Address: 0x1f7ee0)
StrStrIA (Ordinal: 608, Address: 0x1f7ef0)
StrStrIW (Ordinal: 609, Address: 0x1f7f00)
StrStrW (Ordinal: 610, Address: 0x1f7f10)
UsersLibrariesFolderUI_CreateInstance (Ordinal: 611, Address: 0xccd80)
WOWShellExecute (Ordinal: 612, Address: 0x202e90)
WaitForExplorerRestartW (Ordinal: 613, Address: 0x25b820)
(Ordinal: 640, Address: 0x6d62b7)
(Ordinal: 641, Address: 0x6d62aa)
(Ordinal: 643, Address: 0x6d633c)
SHChangeNotification_Lock (Ordinal: 644, Address: 0x16b050)
SHChangeNotification_Unlock (Ordinal: 645, Address: 0x1901d0)
(Ordinal: 646, Address: 0x6d6356)
(Ordinal: 648, Address: 0x6d6661)
(Ordinal: 650, Address: 0x6d5d47)
(Ordinal: 651, Address: 0x201ad0)
WriteCabinetState (Ordinal: 652, Address: 0x202ef0)
(Ordinal: 653, Address: 0x6d62fb)
ReadCabinetState (Ordinal: 654, Address: 0x201d90)
(Ordinal: 660, Address: 0x201690)
IsUserAnAdmin (Ordinal: 680, Address: 0x2624e0)
(Ordinal: 681, Address: 0x6d64af)
StgMakeUniqueName (Ordinal: 682, Address: 0x202e70)
(Ordinal: 683, Address: 0x2cc920)
(Ordinal: 684, Address: 0x2cc920)
SHPropStgCreate (Ordinal: 685, Address: 0x176d20)
SHPropStgReadMultiple (Ordinal: 688, Address: 0x1ad650)
SHPropStgWriteMultiple (Ordinal: 689, Address: 0x2625d0)
(Ordinal: 690, Address: 0x262570)
(Ordinal: 691, Address: 0x6d6450)
(Ordinal: 700, Address: 0x6d5f60)
CDefFolderMenu_Create2 (Ordinal: 701, Address: 0x234880)
(Ordinal: 702, Address: 0xc830)
(Ordinal: 703, Address: 0x6d59cd)
(Ordinal: 704, Address: 0x6d59da)
(Ordinal: 707, Address: 0x6d65cd)
(Ordinal: 708, Address: 0x6d64d9)
SHGetSetFolderCustomSettings (Ordinal: 709, Address: 0x2027b0)
(Ordinal: 711, Address: 0x2012f0)
(Ordinal: 712, Address: 0x6d6363)
(Ordinal: 713, Address: 0x201c90)
(Ordinal: 714, Address: 0x201cb0)
(Ordinal: 715, Address: 0x6d63c4)
SHMultiFileProperties (Ordinal: 716, Address: 0x2cbc20)
(Ordinal: 719, Address: 0x6d65e7)
(Ordinal: 720, Address: 0x6d6290)
(Ordinal: 721, Address: 0x6d629d)
(Ordinal: 722, Address: 0x6d63a8)
(Ordinal: 723, Address: 0x2021d0)
(Ordinal: 724, Address: 0x6d6560)
(Ordinal: 725, Address: 0x6d6206)
(Ordinal: 726, Address: 0x6d5fa5)
SHGetImageList (Ordinal: 727, Address: 0x202570)
RestartDialogEx (Ordinal: 730, Address: 0x250500)
(Ordinal: 731, Address: 0x6d6603)
(Ordinal: 732, Address: 0x6d65f5)
(Ordinal: 733, Address: 0x241520)
(Ordinal: 740, Address: 0x201ff0)
SHCreateFileExtractIconW (Ordinal: 743, Address: 0x202010)
(Ordinal: 744, Address: 0x24e7f0)
(Ordinal: 745, Address: 0x6d5fea)
SHLimitInputEdit (Ordinal: 747, Address: 0x2cb330)
(Ordinal: 748, Address: 0x2cb2d0)
(Ordinal: 749, Address: 0x6d64e6)
SHGetAttributesFromDataObject (Ordinal: 750, Address: 0x202410)
(Ordinal: 751, Address: 0x202bd0)
(Ordinal: 752, Address: 0x202430)
(Ordinal: 753, Address: 0x19f150)
(Ordinal: 754, Address: 0x1eb270)
(Ordinal: 755, Address: 0x201bf0)
(Ordinal: 756, Address: 0x6d602c)
(Ordinal: 757, Address: 0x13030)
(Ordinal: 758, Address: 0x88930)
(Ordinal: 759, Address: 0x88050)
(Ordinal: 760, Address: 0x223da0)
(Ordinal: 761, Address: 0x290e30)
(Ordinal: 762, Address: 0x6d5fdc)
(Ordinal: 763, Address: 0x24e820)
(Ordinal: 764, Address: 0x201230)
(Ordinal: 765, Address: 0x1fa3c0)
(Ordinal: 766, Address: 0x6d6370)
(Ordinal: 767, Address: 0x201250)
(Ordinal: 777, Address: 0x2023f0)
(Ordinal: 778, Address: 0x201290)
(Ordinal: 779, Address: 0x2019f0)
(Ordinal: 781, Address: 0x201df0)
(Ordinal: 782, Address: 0x27fb50)
(Ordinal: 786, Address: 0x6d639a)
(Ordinal: 787, Address: 0x202990)
(Ordinal: 788, Address: 0x202190)
(Ordinal: 789, Address: 0x2021b0)
(Ordinal: 790, Address: 0x202970)
(Ordinal: 791, Address: 0x202170)
(Ordinal: 792, Address: 0x2029b0)
(Ordinal: 810, Address: 0x2c6530)
(Ordinal: 811, Address: 0x2c6330)
(Ordinal: 812, Address: 0x4ee620)
(Ordinal: 813, Address: 0x4ee6c0)
(Ordinal: 814, Address: 0x164540)
(Ordinal: 815, Address: 0x170e30)
(Ordinal: 816, Address: 0x4eae70)
(Ordinal: 817, Address: 0x4ec440)
(Ordinal: 818, Address: 0x4eb950)
(Ordinal: 819, Address: 0x4eb960)
(Ordinal: 820, Address: 0x6d637e)
(Ordinal: 821, Address: 0x6d6426)
(Ordinal: 822, Address: 0x6d6418)
(Ordinal: 823, Address: 0x202510)
(Ordinal: 824, Address: 0x202530)
(Ordinal: 825, Address: 0xc3f30)
(Ordinal: 826, Address: 0x6d638c)
(Ordinal: 827, Address: 0x6d6434)
(Ordinal: 828, Address: 0x2349f0)
(Ordinal: 829, Address: 0x234de0)
(Ordinal: 830, Address: 0x2b97c0)
(Ordinal: 831, Address: 0x202030)
(Ordinal: 832, Address: 0x6d656e)
(Ordinal: 833, Address: 0x262590)
(Ordinal: 834, Address: 0x6d63d2)
(Ordinal: 835, Address: 0x6d63ee)
(Ordinal: 836, Address: 0x6d63e0)
(Ordinal: 837, Address: 0x6d640a)
(Ordinal: 838, Address: 0x6d63fc)
(Ordinal: 839, Address: 0x6d5fb2)
(Ordinal: 840, Address: 0x201bb0)
(Ordinal: 841, Address: 0x6d645e)
(Ordinal: 842, Address: 0x6d646c)
(Ordinal: 843, Address: 0x6d64bd)
(Ordinal: 844, Address: 0x202130)
(Ordinal: 845, Address: 0x4eab00)
ILLoadFromStreamEx (Ordinal: 846, Address: 0x201910)
(Ordinal: 847, Address: 0xc40d0)
(Ordinal: 848, Address: 0x2026b0)
(Ordinal: 849, Address: 0x18da00)
(Ordinal: 850, Address: 0x201b50)
(Ordinal: 851, Address: 0x202850)
(Ordinal: 852, Address: 0x6d6529)
(Ordinal: 853, Address: 0x2026f0)
(Ordinal: 854, Address: 0x6d6274)
(Ordinal: 856, Address: 0x6d5f7c)
(Ordinal: 857, Address: 0x6d5f6e)
(Ordinal: 858, Address: 0x6d62d1)
(Ordinal: 859, Address: 0x2e3950)
(Ordinal: 860, Address: 0x202450)
(Ordinal: 861, Address: 0x6d6442)
(Ordinal: 862, Address: 0x201ed0)
(Ordinal: 863, Address: 0x6d622f)
(Ordinal: 864, Address: 0x280d00)
(Ordinal: 865, Address: 0x201a30)
(Ordinal: 866, Address: 0x202310)
(Ordinal: 867, Address: 0x6d5fc0)
(Ordinal: 868, Address: 0x6d5fce)
(Ordinal: 869, Address: 0x6d62ed)
(Ordinal: 870, Address: 0x1ad5c0)
(Ordinal: 871, Address: 0x20f8d0)
(Ordinal: 872, Address: 0x6d63b6)
(Ordinal: 873, Address: 0x2028d0)
(Ordinal: 874, Address: 0x1e7ef0)
(Ordinal: 875, Address: 0x166f20)
(Ordinal: 876, Address: 0x1ee690)
(Ordinal: 877, Address: 0x276b90)
(Ordinal: 878, Address: 0xac100)
(Ordinal: 880, Address: 0x201310)
(Ordinal: 881, Address: 0x155e10)
(Ordinal: 882, Address: 0x16a460)
(Ordinal: 883, Address: 0x4ea830)
(Ordinal: 884, Address: 0x24fe30)
(Ordinal: 885, Address: 0xe3cf0)
(Ordinal: 886, Address: 0x202910)
(Ordinal: 887, Address: 0x202330)
(Ordinal: 888, Address: 0x2cb410)
(Ordinal: 889, Address: 0x6d6258)
(Ordinal: 890, Address: 0x6d5f97)
(Ordinal: 891, Address: 0x289af0)
(Ordinal: 892, Address: 0x6d6213)
(Ordinal: 893, Address: 0x1ad50)
(Ordinal: 894, Address: 0x223d60)
(Ordinal: 895, Address: 0x179630)
(Ordinal: 896, Address: 0x223c60)
(Ordinal: 897, Address: 0x2cf820)
(Ordinal: 898, Address: 0x202110)
(Ordinal: 899, Address: 0x202c90)
(Ordinal: 900, Address: 0x171010)
(Ordinal: 901, Address: 0x167450)
(Ordinal: 902, Address: 0x6d6266)
(Ordinal: 903, Address: 0x1e35a0)
(Ordinal: 904, Address: 0x262690)
(Ordinal: 905, Address: 0x2624a0)
(Ordinal: 906, Address: 0x201710)
(Ordinal: 907, Address: 0x4f960)
(Ordinal: 909, Address: 0x6d6221)
(Ordinal: 910, Address: 0x201330)
(Ordinal: 911, Address: 0x2011d0)
(Ordinal: 912, Address: 0x24dcb0)
(Ordinal: 913, Address: 0x2013b0)
(Ordinal: 914, Address: 0x2010b0)
(Ordinal: 915, Address: 0x88240)
(Ordinal: 916, Address: 0x184430)
GetSystemPersistedStorageItemList (Ordinal: 919, Address: 0x223d40)
CreateStorageItemFromPath_PartialTrustCaller (Ordinal: 920, Address: 0x223cc0)
CreateStorageItemFromShellItem_FullTrustCaller (Ordinal: 921, Address: 0x223ce0)
(Ordinal: 922, Address: 0x202a70)
(Ordinal: 923, Address: 0x1adbb0)
(Ordinal: 924, Address: 0x223c20)
CreateStorageItemFromShellItem_FullTrustCaller_ForPackage (Ordinal: 925, Address: 0x180320)
(Ordinal: 927, Address: 0x201f70)
(Ordinal: 928, Address: 0x202270)
CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle (Ordinal: 929, Address: 0x223d00)
(Ordinal: 930, Address: 0x201b90)
CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage (Ordinal: 931, Address: 0x223d20)
(Ordinal: 932, Address: 0x223e60)
(Ordinal: 933, Address: 0x223e00)
CreateStorageItemFromPath_FullTrustCaller (Ordinal: 935, Address: 0x223c80)
CreateStorageItemFromPath_FullTrustCaller_ForPackage (Ordinal: 936, Address: 0x223ca0)
CStorageItem_GetValidatedStorageItemObject (Ordinal: 937, Address: 0x223c40)
(Ordinal: 938, Address: 0x290e10)
(Ordinal: 939, Address: 0xc24b0)
(Ordinal: 940, Address: 0x223d80)
IsProcessAnExplorer (Ordinal: 941, Address: 0x201a90)
IsDesktopExplorerProcess (Ordinal: 942, Address: 0x201a10)
(Ordinal: 943, Address: 0x49490)
(Ordinal: 944, Address: 0x2cc3d0)
(Ordinal: 945, Address: 0x2905a0)
(Ordinal: 946, Address: 0x2025f0)
(Ordinal: 947, Address: 0x235d40)
(Ordinal: 948, Address: 0x235d20)
(Ordinal: 949, Address: 0x235cf0)
(Ordinal: 950, Address: 0x235ca0)
(Ordinal: 951, Address: 0x235cc0)
(Ordinal: 952, Address: 0x235c80)
(Ordinal: 953, Address: 0x235a70)
(Ordinal: 970, Address: 0x201d50)
(Ordinal: 971, Address: 0x2012b0)
(Ordinal: 972, Address: 0x201390)
(Ordinal: 2000, Address: 0x290830)
(Ordinal: 2001, Address: 0x2ddf80)
(Ordinal: 2002, Address: 0x16c340)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1805f42c8)

api-ms-win-core-atoms-l1-1-0.dll

FindAtomW (Address: 0x1805f42f8)
GetAtomNameW (Address: 0x1805f42e0)
GlobalAddAtomW (Address: 0x1805f42f0)
GlobalDeleteAtom (Address: 0x1805f42e8)
GlobalGetAtomNameW (Address: 0x1805f42d8)

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatW (Address: 0x1805f4308)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1805f4328)
IsDebuggerPresent (Address: 0x1805f4318)
OutputDebugStringW (Address: 0x1805f4320)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1805f4338)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1805f4348)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1805f4370)
RaiseException (Address: 0x1805f4358)
SetErrorMode (Address: 0x1805f4360)
SetLastError (Address: 0x1805f4380)
SetUnhandledExceptionFilter (Address: 0x1805f4368)
UnhandledExceptionFilter (Address: 0x1805f4378)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1805f43e8)
CreateDirectoryW (Address: 0x1805f43e0)
CreateFileW (Address: 0x1805f4450)
DefineDosDeviceW (Address: 0x1805f4460)
DeleteFileW (Address: 0x1805f4498)
FileTimeToLocalFileTime (Address: 0x1805f4410)
FindClose (Address: 0x1805f4458)
FindFirstFileExW (Address: 0x1805f4400)
FindFirstFileW (Address: 0x1805f4470)
FindFirstVolumeW (Address: 0x1805f4480)
FindNextFileW (Address: 0x1805f4468)
FindNextVolumeW (Address: 0x1805f4408)
FindVolumeClose (Address: 0x1805f43b8)
GetDiskFreeSpaceW (Address: 0x1805f4448)
GetDriveTypeW (Address: 0x1805f4430)
GetFileAttributesExW (Address: 0x1805f43f8)
GetFileAttributesW (Address: 0x1805f4398)
GetFileInformationByHandle (Address: 0x1805f44a8)
GetFileSize (Address: 0x1805f43c0)
GetFileSizeEx (Address: 0x1805f43f0)
GetFullPathNameW (Address: 0x1805f4428)
GetLogicalDrives (Address: 0x1805f43d0)
GetLongPathNameW (Address: 0x1805f4390)
GetShortPathNameW (Address: 0x1805f43a0)
GetTempFileNameW (Address: 0x1805f4418)
GetVolumeInformationW (Address: 0x1805f43b0)
GetVolumePathNameW (Address: 0x1805f4488)
LocalFileTimeToFileTime (Address: 0x1805f4490)
QueryDosDeviceW (Address: 0x1805f4438)
ReadFile (Address: 0x1805f43c8)
RemoveDirectoryW (Address: 0x1805f4420)
SetEndOfFile (Address: 0x1805f44b0)
SetFileAttributesW (Address: 0x1805f44a0)
SetFileInformationByHandle (Address: 0x1805f43a8)
SetFilePointer (Address: 0x1805f43d8)
SetFileTime (Address: 0x1805f4478)
WriteFile (Address: 0x1805f4440)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1805f44c0)
GetVolumeNameForVolumeMountPointW (Address: 0x1805f44c8)
GetVolumePathNamesForVolumeNameW (Address: 0x1805f44d0)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x1805f44e0)
MoveFileExW (Address: 0x1805f44f0)
ReplaceFileW (Address: 0x1805f44e8)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x1805f4500)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1805f4510)
DuplicateHandle (Address: 0x1805f4518)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1805f4530)
HeapAlloc (Address: 0x1805f4548)
HeapDestroy (Address: 0x1805f4538)
HeapFree (Address: 0x1805f4540)
HeapReAlloc (Address: 0x1805f4528)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x1805f4568)
GlobalFree (Address: 0x1805f4560)
LocalAlloc (Address: 0x1805f4558)
LocalFree (Address: 0x1805f4578)
LocalReAlloc (Address: 0x1805f4570)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalFlags (Address: 0x1805f4598)
GlobalLock (Address: 0x1805f4588)
GlobalReAlloc (Address: 0x1805f45b0)
GlobalSize (Address: 0x1805f45a8)
GlobalUnlock (Address: 0x1805f45a0)
LocalSize (Address: 0x1805f4590)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1805f45c0)
InterlockedPopEntrySList (Address: 0x1805f45d0)
InterlockedPushEntrySList (Address: 0x1805f45c8)

api-ms-win-core-io-l1-1-0.dll

CreateIoCompletionPort (Address: 0x1805f45f0)
DeviceIoControl (Address: 0x1805f45e0)
GetQueuedCompletionStatus (Address: 0x1805f45e8)

api-ms-win-core-io-l1-1-1.dll

CancelSynchronousIo (Address: 0x1805f4600)

api-ms-win-core-job-l2-1-0.dll

AssignProcessToJobObject (Address: 0x1805f4620)
CreateJobObjectW (Address: 0x1805f4618)
SetInformationJobObject (Address: 0x1805f4610)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x1805f4638)
GetSystemPowerStatus (Address: 0x1805f4630)
MulDiv (Address: 0x1805f4660)
RegisterWaitForSingleObject (Address: 0x1805f4648)
SetVolumeLabelW (Address: 0x1805f4640)
UnregisterWait (Address: 0x1805f4658)
WTSGetActiveConsoleSessionId (Address: 0x1805f4650)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

PowerClearRequest (Address: 0x1805f4678)
PowerCreateRequest (Address: 0x1805f4670)
PowerSetRequest (Address: 0x1805f4680)
VerifyVersionInfoW (Address: 0x1805f4688)

api-ms-win-core-kernel32-legacy-l1-1-2.dll

GetBinaryTypeW (Address: 0x1805f4698)

api-ms-win-core-kernel32-private-l1-1-0.dll

CheckElevation (Address: 0x1805f46a8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1805f46f8)
EnumResourceNamesExW (Address: 0x1805f4728)
FindResourceExW (Address: 0x1805f4738)
FindStringOrdinal (Address: 0x1805f4718)
FreeLibrary (Address: 0x1805f46d0)
FreeResource (Address: 0x1805f46f0)
GetModuleFileNameA (Address: 0x1805f4710)
GetModuleFileNameW (Address: 0x1805f46e8)
GetModuleHandleExA (Address: 0x1805f46d8)
GetModuleHandleExW (Address: 0x1805f4720)
GetModuleHandleW (Address: 0x1805f46c8)
GetProcAddress (Address: 0x1805f46b8)
LoadLibraryExA (Address: 0x1805f4740)
LoadLibraryExW (Address: 0x1805f4708)
LoadResource (Address: 0x1805f46e0)
LoadStringA (Address: 0x1805f4700)
LoadStringW (Address: 0x1805f4748)
LockResource (Address: 0x1805f46c0)
SizeofResource (Address: 0x1805f4730)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x1805f4760)
LoadLibraryW (Address: 0x1805f4758)

api-ms-win-core-localization-l1-2-0.dll

FindNLSString (Address: 0x1805f47a8)
FindNLSStringEx (Address: 0x1805f47f0)
FormatMessageW (Address: 0x1805f47a0)
GetACP (Address: 0x1805f4788)
GetLocaleInfoW (Address: 0x1805f47d0)
GetSystemDefaultLangID (Address: 0x1805f4770)
GetSystemDefaultLCID (Address: 0x1805f47b0)
GetSystemPreferredUILanguages (Address: 0x1805f4778)
GetThreadLocale (Address: 0x1805f4798)
GetThreadUILanguage (Address: 0x1805f47b8)
GetUserDefaultLangID (Address: 0x1805f47e0)
GetUserPreferredUILanguages (Address: 0x1805f47d8)
IsValidLocaleName (Address: 0x1805f47f8)
LCMapStringEx (Address: 0x1805f47c8)
LCMapStringW (Address: 0x1805f47e8)
LocaleNameToLCID (Address: 0x1805f4780)
ResolveLocaleName (Address: 0x1805f4790)
VerLanguageNameW (Address: 0x1805f47c0)

api-ms-win-core-localization-l1-2-2.dll

LCIDToLocaleName (Address: 0x1805f4808)

api-ms-win-core-localization-l2-1-0.dll

GetNumberFormatEx (Address: 0x1805f4818)

api-ms-win-core-localization-obsolete-l1-2-0.dll

EnumUILanguagesW (Address: 0x1805f4830)
GetNumberFormatW (Address: 0x1805f4838)
GetUserDefaultUILanguage (Address: 0x1805f4828)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1805f4858)
MapViewOfFile (Address: 0x1805f4878)
OpenFileMappingW (Address: 0x1805f4890)
ReadProcessMemory (Address: 0x1805f4870)
UnmapViewOfFile (Address: 0x1805f4850)
VirtualAlloc (Address: 0x1805f4888)
VirtualFree (Address: 0x1805f4868)
VirtualProtect (Address: 0x1805f4860)
VirtualQuery (Address: 0x1805f4880)
WriteProcessMemory (Address: 0x1805f4848)

api-ms-win-core-memory-l1-1-1.dll

PrefetchVirtualMemory (Address: 0x1805f48a0)

api-ms-win-core-path-l1-1-0.dll

PathAllocCanonicalize (Address: 0x1805f48f8)
PathAllocCombine (Address: 0x1805f4908)
PathCchAddBackslash (Address: 0x1805f48c8)
PathCchAddExtension (Address: 0x1805f48b8)
PathCchAppend (Address: 0x1805f48d0)
PathCchAppendEx (Address: 0x1805f4910)
PathCchCanonicalize (Address: 0x1805f4918)
PathCchCombine (Address: 0x1805f48b0)
PathCchRemoveBackslash (Address: 0x1805f48e8)
PathCchRemoveExtension (Address: 0x1805f4928)
PathCchRemoveFileSpec (Address: 0x1805f48c0)
PathCchRenameExtension (Address: 0x1805f4920)
PathCchSkipRoot (Address: 0x1805f48e0)
PathCchStripPrefix (Address: 0x1805f4900)
PathCchStripToRoot (Address: 0x1805f48f0)
PathIsUNCEx (Address: 0x1805f48d8)

api-ms-win-core-privateprofile-l1-1-0.dll

GetPrivateProfileSectionW (Address: 0x1805f4948)
GetPrivateProfileStringW (Address: 0x1805f4940)
WritePrivateProfileStringW (Address: 0x1805f4938)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x1805f4960)
ExpandEnvironmentStringsW (Address: 0x1805f4988)
GetCommandLineW (Address: 0x1805f4978)
GetCurrentDirectoryW (Address: 0x1805f4968)
GetEnvironmentVariableW (Address: 0x1805f4970)
SearchPathW (Address: 0x1805f4990)
SetCurrentDirectoryW (Address: 0x1805f4980)
SetEnvironmentVariableW (Address: 0x1805f4958)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x1805f4a70)
CreateThread (Address: 0x1805f4a08)
DeleteProcThreadAttributeList (Address: 0x1805f49d8)
GetCurrentProcess (Address: 0x1805f4a50)
GetCurrentProcessId (Address: 0x1805f4a60)
GetCurrentThread (Address: 0x1805f4a00)
GetCurrentThreadId (Address: 0x1805f49f0)
GetExitCodeProcess (Address: 0x1805f49c8)
GetExitCodeThread (Address: 0x1805f49d0)
GetProcessId (Address: 0x1805f4a48)
GetThreadId (Address: 0x1805f4a20)
GetThreadPriority (Address: 0x1805f49a0)
InitializeProcThreadAttributeList (Address: 0x1805f49e0)
OpenProcessToken (Address: 0x1805f4a58)
OpenThread (Address: 0x1805f4a38)
OpenThreadToken (Address: 0x1805f4a10)
ProcessIdToSessionId (Address: 0x1805f4a68)
ResumeThread (Address: 0x1805f4a30)
SetPriorityClass (Address: 0x1805f4a28)
SetThreadPriority (Address: 0x1805f4a18)
SetThreadToken (Address: 0x1805f4a40)
TerminateProcess (Address: 0x1805f49b0)
TlsAlloc (Address: 0x1805f49b8)
TlsFree (Address: 0x1805f49c0)
TlsGetValue (Address: 0x1805f49a8)
TlsSetValue (Address: 0x1805f49f8)
UpdateProcThreadAttribute (Address: 0x1805f49e8)

api-ms-win-core-processthreads-l1-1-1.dll

FlushInstructionCache (Address: 0x1805f4a88)
IsProcessorFeaturePresent (Address: 0x1805f4a90)
OpenProcess (Address: 0x1805f4a80)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1805f4aa0)
QueryPerformanceFrequency (Address: 0x1805f4aa8)

api-ms-win-core-psapi-l1-1-0.dll

K32GetModuleFileNameExW (Address: 0x1805f4ab8)
K32GetProcessImageFileNameW (Address: 0x1805f4ac0)
QueryFullProcessImageNameW (Address: 0x1805f4ac8)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x1805f4ad8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1805f4b18)
RegCreateKeyExW (Address: 0x1805f4af8)
RegDeleteKeyExW (Address: 0x1805f4b00)
RegDeleteTreeW (Address: 0x1805f4b38)
RegDeleteValueW (Address: 0x1805f4b60)
RegEnumKeyExW (Address: 0x1805f4ae8)
RegEnumValueW (Address: 0x1805f4b28)
RegGetValueW (Address: 0x1805f4b30)
RegNotifyChangeKeyValue (Address: 0x1805f4b08)
RegOpenCurrentUser (Address: 0x1805f4b20)
RegOpenKeyExA (Address: 0x1805f4b10)
RegOpenKeyExW (Address: 0x1805f4b48)
RegQueryInfoKeyA (Address: 0x1805f4b68)
RegQueryInfoKeyW (Address: 0x1805f4b40)
RegQueryValueExA (Address: 0x1805f4b58)
RegQueryValueExW (Address: 0x1805f4b50)
RegSetValueExW (Address: 0x1805f4af0)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x1805f4b78)

api-ms-win-core-registryuserspecific-l1-1-0.dll

SHRegCloseUSKey (Address: 0x1805f4bb0)
SHRegEnumUSKeyW (Address: 0x1805f4b90)
SHRegGetBoolUSValueW (Address: 0x1805f4b98)
SHRegGetUSValueW (Address: 0x1805f4ba8)
SHRegOpenUSKeyA (Address: 0x1805f4b88)
SHRegOpenUSKeyW (Address: 0x1805f4bb8)
SHRegQueryUSValueW (Address: 0x1805f4ba0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1805f4bd8)
RtlLookupFunctionEntry (Address: 0x1805f4bc8)
RtlVirtualUnwind (Address: 0x1805f4bd0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

IsCharSpaceW (Address: 0x1805f4c70)
PathAddBackslashW (Address: 0x1805f4c88)
PathAppendW (Address: 0x1805f4c40)
PathCombineW (Address: 0x1805f4c20)
PathCommonPrefixW (Address: 0x1805f4bf0)
PathFileExistsW (Address: 0x1805f4cd8)
PathFindExtensionW (Address: 0x1805f4c80)
PathFindFileNameW (Address: 0x1805f4ce0)
PathFindNextComponentW (Address: 0x1805f4cb0)
PathGetArgsW (Address: 0x1805f4cc0)
PathGetDriveNumberW (Address: 0x1805f4c18)
PathIsFileSpecW (Address: 0x1805f4ca0)
PathIsPrefixW (Address: 0x1805f4c08)
PathIsRelativeW (Address: 0x1805f4c60)
PathIsRootW (Address: 0x1805f4c50)
PathIsSameRootW (Address: 0x1805f4c78)
PathIsUNCServerShareW (Address: 0x1805f4be8)
PathIsUNCServerW (Address: 0x1805f4ca8)
PathIsUNCW (Address: 0x1805f4c68)
PathIsValidCharW (Address: 0x1805f4c58)
PathMatchSpecExW (Address: 0x1805f4c48)
PathMatchSpecW (Address: 0x1805f4cc8)
PathParseIconLocationW (Address: 0x1805f4bf8)
PathQuoteSpacesW (Address: 0x1805f4c90)
PathRemoveBackslashW (Address: 0x1805f4c38)
PathRemoveBlanksW (Address: 0x1805f4c10)
PathRemoveExtensionW (Address: 0x1805f4c30)
PathRemoveFileSpecW (Address: 0x1805f4cd0)
PathSkipRootW (Address: 0x1805f4cb8)
PathStripToRootW (Address: 0x1805f4c98)
PathUnExpandEnvStringsW (Address: 0x1805f4ce8)
PathUnquoteSpacesW (Address: 0x1805f4c00)
SHExpandEnvironmentStringsW (Address: 0x1805f4c28)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x1805f4e10)
StrChrA (Address: 0x1805f4d78)
StrChrIA (Address: 0x1805f4d98)
StrChrIW (Address: 0x1805f4da0)
StrChrW (Address: 0x1805f4df8)
StrCmpCW (Address: 0x1805f4d60)
StrCmpICA (Address: 0x1805f4d10)
StrCmpICW (Address: 0x1805f4d48)
StrCmpIW (Address: 0x1805f4d38)
StrCmpLogicalW (Address: 0x1805f4e00)
StrCmpNA (Address: 0x1805f4de8)
StrCmpNCW (Address: 0x1805f4dc8)
StrCmpNIA (Address: 0x1805f4dd8)
StrCmpNICW (Address: 0x1805f4dd0)
StrCmpNIW (Address: 0x1805f4dc0)
StrCmpNW (Address: 0x1805f4d70)
StrCmpW (Address: 0x1805f4d88)
StrCSpnW (Address: 0x1805f4db8)
StrDupA (Address: 0x1805f4db0)
StrDupW (Address: 0x1805f4da8)
StrPBrkW (Address: 0x1805f4de0)
StrRChrA (Address: 0x1805f4d68)
StrRChrIA (Address: 0x1805f4d50)
StrRChrIW (Address: 0x1805f4d40)
StrRChrW (Address: 0x1805f4d30)
StrRStrIA (Address: 0x1805f4d28)
StrRStrIW (Address: 0x1805f4d20)
StrSpnW (Address: 0x1805f4df0)
StrStrA (Address: 0x1805f4d18)
StrStrIA (Address: 0x1805f4d08)
StrStrIW (Address: 0x1805f4d00)
StrStrW (Address: 0x1805f4cf8)
StrToIntA (Address: 0x1805f4e08)
StrToIntExW (Address: 0x1805f4d90)
StrToIntW (Address: 0x1805f4d58)
StrTrimW (Address: 0x1805f4d80)

api-ms-win-core-sidebyside-l1-1-0.dll

ActivateActCtx (Address: 0x1805f4e40)
CreateActCtxW (Address: 0x1805f4e38)
DeactivateActCtx (Address: 0x1805f4e28)
QueryActCtxW (Address: 0x1805f4e30)
ReleaseActCtx (Address: 0x1805f4e20)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x1805f4e68)
CompareStringOrdinal (Address: 0x1805f4e50)
CompareStringW (Address: 0x1805f4e78)
GetStringTypeExW (Address: 0x1805f4e80)
GetStringTypeW (Address: 0x1805f4e70)
MultiByteToWideChar (Address: 0x1805f4e60)
WideCharToMultiByte (Address: 0x1805f4e58)

api-ms-win-core-string-l2-1-0.dll

CharLowerBuffW (Address: 0x1805f4ea0)
CharLowerW (Address: 0x1805f4eb8)
CharNextW (Address: 0x1805f4eb0)
CharPrevW (Address: 0x1805f4e98)
CharUpperBuffW (Address: 0x1805f4ec0)
CharUpperW (Address: 0x1805f4e90)
IsCharAlphaW (Address: 0x1805f4ea8)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x1805f4ed0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpA (Address: 0x1805f4ef8)
lstrcmpiA (Address: 0x1805f4f00)
lstrcmpiW (Address: 0x1805f4ef0)
lstrcmpW (Address: 0x1805f4ee0)
lstrlenA (Address: 0x1805f4ee8)
lstrlenW (Address: 0x1805f4f08)

api-ms-win-core-stringansi-l1-1-0.dll

CharNextA (Address: 0x1805f4f18)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1805f4f50)
AcquireSRWLockShared (Address: 0x1805f4f58)
CreateEventExW (Address: 0x1805f4fd8)
CreateEventW (Address: 0x1805f4f80)
CreateMutexExW (Address: 0x1805f4f30)
CreateMutexW (Address: 0x1805f4fc8)
CreateSemaphoreExW (Address: 0x1805f4fd0)
DeleteCriticalSection (Address: 0x1805f4ff8)
EnterCriticalSection (Address: 0x1805f4fb8)
InitializeCriticalSection (Address: 0x1805f4f28)
InitializeCriticalSectionAndSpinCount (Address: 0x1805f5000)
InitializeCriticalSectionEx (Address: 0x1805f4f98)
InitializeSRWLock (Address: 0x1805f4f70)
LeaveCriticalSection (Address: 0x1805f4fa0)
OpenEventW (Address: 0x1805f4f60)
OpenMutexW (Address: 0x1805f5008)
OpenSemaphoreW (Address: 0x1805f4f40)
ReleaseMutex (Address: 0x1805f4f78)
ReleaseSemaphore (Address: 0x1805f4fb0)
ReleaseSRWLockExclusive (Address: 0x1805f4f68)
ReleaseSRWLockShared (Address: 0x1805f4f38)
ResetEvent (Address: 0x1805f4fa8)
SetEvent (Address: 0x1805f4f90)
TryAcquireSRWLockExclusive (Address: 0x1805f4fe8)
TryAcquireSRWLockShared (Address: 0x1805f4fe0)
TryEnterCriticalSection (Address: 0x1805f4fc0)
WaitForMultipleObjectsEx (Address: 0x1805f4ff0)
WaitForSingleObject (Address: 0x1805f4f88)
WaitForSingleObjectEx (Address: 0x1805f4f48)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1805f5018)
InitOnceComplete (Address: 0x1805f5020)
InitOnceExecuteOnce (Address: 0x1805f5030)
Sleep (Address: 0x1805f5028)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1805f5048)
GetLocalTime (Address: 0x1805f5080)
GetSystemDirectoryW (Address: 0x1805f5060)
GetSystemInfo (Address: 0x1805f5098)
GetSystemTime (Address: 0x1805f5070)
GetSystemTimeAsFileTime (Address: 0x1805f5068)
GetSystemWindowsDirectoryW (Address: 0x1805f5050)
GetTickCount (Address: 0x1805f5090)
GetTickCount64 (Address: 0x1805f5088)
GetVersionExW (Address: 0x1805f5040)
GetWindowsDirectoryW (Address: 0x1805f5078)
GlobalMemoryStatusEx (Address: 0x1805f5058)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x1805f50b8)
GetProductInfo (Address: 0x1805f50b0)
GetSystemTimePreciseAsFileTime (Address: 0x1805f50c0)
VerSetConditionMask (Address: 0x1805f50a8)

api-ms-win-core-sysinfo-l1-2-3.dll

GetIntegratedDisplaySize (Address: 0x1805f50d0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1805f5110)
CloseThreadpoolWait (Address: 0x1805f50f8)
CloseThreadpoolWork (Address: 0x1805f5138)
CreateThreadpoolTimer (Address: 0x1805f5100)
CreateThreadpoolWait (Address: 0x1805f50e0)
CreateThreadpoolWork (Address: 0x1805f5128)
IsThreadpoolTimerSet (Address: 0x1805f5118)
SetThreadpoolTimer (Address: 0x1805f5108)
SetThreadpoolTimerEx (Address: 0x1805f5140)
SetThreadpoolWait (Address: 0x1805f5130)
SubmitThreadpoolWork (Address: 0x1805f5120)
TrySubmitThreadpoolCallback (Address: 0x1805f5148)
WaitForThreadpoolTimerCallbacks (Address: 0x1805f50f0)
WaitForThreadpoolWaitCallbacks (Address: 0x1805f50e8)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x1805f5168)
DeleteTimerQueueTimer (Address: 0x1805f5160)
QueueUserWorkItem (Address: 0x1805f5170)
UnregisterWaitEx (Address: 0x1805f5158)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x1805f51a0)
GetTimeZoneInformationForYear (Address: 0x1805f5190)
SystemTimeToFileTime (Address: 0x1805f5198)
SystemTimeToTzSpecificLocalTime (Address: 0x1805f5180)
TzSpecificLocalTimeToSystemTime (Address: 0x1805f5188)

api-ms-win-core-url-l1-1-0.dll

HashData (Address: 0x1805f51d0)
ParseURLW (Address: 0x1805f51c8)
PathCreateFromUrlAlloc (Address: 0x1805f5208)
PathCreateFromUrlW (Address: 0x1805f51c0)
PathIsURLW (Address: 0x1805f51b0)
UrlApplySchemeW (Address: 0x1805f5218)
UrlCanonicalizeW (Address: 0x1805f51e0)
UrlCompareW (Address: 0x1805f5200)
UrlCreateFromPathW (Address: 0x1805f51f0)
UrlEscapeW (Address: 0x1805f5220)
UrlFixupW (Address: 0x1805f51e8)
UrlGetPartW (Address: 0x1805f5210)
UrlIsW (Address: 0x1805f51b8)
UrlUnescapeA (Address: 0x1805f51d8)
UrlUnescapeW (Address: 0x1805f51f8)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1805f5230)
EncodePointer (Address: 0x1805f5238)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x1805f5250)
GetFileVersionInfoSizeExW (Address: 0x1805f5258)
VerQueryValueW (Address: 0x1805f5248)

api-ms-win-core-wow64-l1-1-0.dll

Wow64DisableWow64FsRedirection (Address: 0x1805f5268)
Wow64RevertWow64FsRedirection (Address: 0x1805f5270)

api-ms-win-core-wow64-l1-1-1.dll

GetSystemWow64DirectoryW (Address: 0x1805f5288)
IsWow64Process2 (Address: 0x1805f5280)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x1805f53e0)
__current_exception (Address: 0x1805f5380)
__current_exception_context (Address: 0x1805f5388)
__CxxFrameHandler3 (Address: 0x1805f5390)
__CxxFrameHandler4 (Address: 0x1805f54e0)
__std_terminate (Address: 0x1805f54d8)
_CxxThrowException (Address: 0x1805f54e8)
_o___std_exception_copy (Address: 0x1805f54d0)
_o___std_exception_destroy (Address: 0x1805f54c8)
_o___std_type_info_destroy_list (Address: 0x1805f54c0)
_o___stdio_common_vsnprintf_s (Address: 0x1805f54b8)
_o___stdio_common_vsprintf (Address: 0x1805f54b0)
_o___stdio_common_vsprintf_s (Address: 0x1805f54a8)
_o___stdio_common_vswprintf (Address: 0x1805f54a0)
_o___stdio_common_vswscanf (Address: 0x1805f5498)
_o__beginthreadex (Address: 0x1805f5490)
_o__cexit (Address: 0x1805f5488)
_o__configure_narrow_argv (Address: 0x1805f5480)
_o__crt_atexit (Address: 0x1805f5478)
_o__difftime64 (Address: 0x1805f5470)
_o__errno (Address: 0x1805f5468)
_o__execute_onexit_table (Address: 0x1805f5460)
_o__get_errno (Address: 0x1805f5458)
_o__initialize_narrow_environment (Address: 0x1805f5450)
_o__initialize_onexit_table (Address: 0x1805f5448)
_o__invalid_parameter_noinfo (Address: 0x1805f5440)
_o__invalid_parameter_noinfo_noreturn (Address: 0x1805f5438)
_o__itow (Address: 0x1805f5430)
_o__purecall (Address: 0x1805f5420)
_o__register_onexit_function (Address: 0x1805f5418)
_o__resetstkoflw (Address: 0x1805f5410)
_o__seh_filter_dll (Address: 0x1805f5408)
_o__set_errno (Address: 0x1805f5400)
_o__strnicmp (Address: 0x1805f53e8)
_o__ui64tow_s (Address: 0x1805f53d0)
_o__wcsicmp (Address: 0x1805f53c8)
_o__wcslwr (Address: 0x1805f53c0)
_o__wcsnicmp (Address: 0x1805f53b8)
_o__wcstoui64 (Address: 0x1805f53b0)
_o__wtoi (Address: 0x1805f53a8)
_o_abort (Address: 0x1805f53a0)
_o_ceil (Address: 0x1805f5398)
_o_ceilf (Address: 0x1805f52e8)
_o_expf (Address: 0x1805f5428)
_o_floor (Address: 0x1805f53f8)
_o_floorf (Address: 0x1805f53f0)
_o_free (Address: 0x1805f5298)
_o_isdigit (Address: 0x1805f52a0)
_o_iswprint (Address: 0x1805f52a8)
_o_iswspace (Address: 0x1805f52b0)
_o_log (Address: 0x1805f52b8)
_o_logf (Address: 0x1805f52c0)
_o_malloc (Address: 0x1805f52d0)
_o_pow (Address: 0x1805f52d8)
_o_powf (Address: 0x1805f52e0)
_o_qsort (Address: 0x1805f52f0)
_o_rand (Address: 0x1805f52f8)
_o_realloc (Address: 0x1805f5300)
_o_sqrt (Address: 0x1805f5308)
_o_sqrtf (Address: 0x1805f5310)
_o_srand (Address: 0x1805f5318)
_o_strncpy_s (Address: 0x1805f5320)
_o_strtol (Address: 0x1805f5328)
_o_terminate (Address: 0x1805f5330)
_o_towlower (Address: 0x1805f5338)
_o_wcscat_s (Address: 0x1805f5340)
_o_wcscpy_s (Address: 0x1805f5500)
_o_wcsncpy_s (Address: 0x1805f5350)
_o_wcstok_s (Address: 0x1805f5358)
_o_wcstol (Address: 0x1805f5360)
_o_wcstoul (Address: 0x1805f5368)
memcmp (Address: 0x1805f54f0)
memcpy (Address: 0x1805f54f8)
memmove (Address: 0x1805f5348)
strchr (Address: 0x1805f5370)
wcschr (Address: 0x1805f52c8)
wcsrchr (Address: 0x1805f5378)
wcsstr (Address: 0x1805f53d8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1805f5518)
_initterm_e (Address: 0x1805f5510)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1805f5540)
wcscmp (Address: 0x1805f5530)
wcscspn (Address: 0x1805f5528)
wcsncmp (Address: 0x1805f5550)
wcspbrk (Address: 0x1805f5538)
wcsspn (Address: 0x1805f5548)

api-ms-win-crt-time-l1-1-0.dll

_time64 (Address: 0x1805f5560)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1805f5590)
GetTraceEnableLevel (Address: 0x1805f5588)
GetTraceLoggerHandle (Address: 0x1805f5580)
RegisterTraceGuidsW (Address: 0x1805f5570)
UnregisterTraceGuids (Address: 0x1805f5578)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1805f55a8)
EventRegister (Address: 0x1805f55b8)
EventSetInformation (Address: 0x1805f55b0)
EventUnregister (Address: 0x1805f55c0)
EventWriteTransfer (Address: 0x1805f55a0)

api-ms-win-ro-typeresolution-l1-1-1.dll

RoCreatePropertySetSerializer (Address: 0x1805f55d0)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x1805f5630)
AddAccessAllowedAceEx (Address: 0x1805f5660)
AddAccessDeniedAceEx (Address: 0x1805f5628)
AddAce (Address: 0x1805f5668)
AdjustTokenPrivileges (Address: 0x1805f5690)
CheckTokenMembership (Address: 0x1805f56d0)
CopySid (Address: 0x1805f55e0)
CreateWellKnownSid (Address: 0x1805f5688)
DeleteAce (Address: 0x1805f56a8)
DuplicateToken (Address: 0x1805f56b8)
DuplicateTokenEx (Address: 0x1805f5670)
EqualSid (Address: 0x1805f56c0)
GetAce (Address: 0x1805f56a0)
GetAclInformation (Address: 0x1805f56b0)
GetFileSecurityW (Address: 0x1805f5638)
GetLengthSid (Address: 0x1805f55e8)
GetSecurityDescriptorControl (Address: 0x1805f5610)
GetSidIdentifierAuthority (Address: 0x1805f5600)
GetSidLengthRequired (Address: 0x1805f55f0)
GetSidSubAuthority (Address: 0x1805f5608)
GetSidSubAuthorityCount (Address: 0x1805f56c8)
GetTokenInformation (Address: 0x1805f5698)
ImpersonateSelf (Address: 0x1805f5618)
InitializeAcl (Address: 0x1805f5640)
InitializeSid (Address: 0x1805f55f8)
IsValidSid (Address: 0x1805f5680)
IsWellKnownSid (Address: 0x1805f5658)
RevertToSelf (Address: 0x1805f5620)
SetFileSecurityW (Address: 0x1805f5648)
SetSecurityDescriptorOwner (Address: 0x1805f5650)
SetTokenInformation (Address: 0x1805f5678)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x1805f56e0)

GDI32.dll

BitBlt (Address: 0x1805f3740)
CombineRgn (Address: 0x1805f38a0)
CreateCompatibleBitmap (Address: 0x1805f37f8)
CreateCompatibleDC (Address: 0x1805f3718)
CreateDCW (Address: 0x1805f3730)
CreateDIBSection (Address: 0x1805f3710)
CreateFontIndirectW (Address: 0x1805f37c0)
CreateFontW (Address: 0x1805f38d8)
CreatePen (Address: 0x1805f3810)
CreatePolygonRgn (Address: 0x1805f3858)
CreateRectRgn (Address: 0x1805f3818)
CreateRectRgnIndirect (Address: 0x1805f3888)
CreateSolidBrush (Address: 0x1805f3750)
DeleteDC (Address: 0x1805f3728)
DeleteMetaFile (Address: 0x1805f37b8)
DeleteObject (Address: 0x1805f36e8)
ExcludeClipRect (Address: 0x1805f3708)
ExtSelectClipRgn (Address: 0x1805f3878)
ExtTextOutW (Address: 0x1805f38c8)
GdiAlphaBlend (Address: 0x1805f3738)
GdiTransparentBlt (Address: 0x1805f3770)
GetClipBox (Address: 0x1805f37d0)
GetClipRgn (Address: 0x1805f3820)
GetCurrentObject (Address: 0x1805f3808)
GetDeviceCaps (Address: 0x1805f3700)
GetDIBColorTable (Address: 0x1805f38d0)
GetDIBits (Address: 0x1805f3760)
GetLayout (Address: 0x1805f38f8)
GetObjectType (Address: 0x1805f38c0)
GetObjectW (Address: 0x1805f3748)
GetPixel (Address: 0x1805f38e0)
GetRegionData (Address: 0x1805f38b0)
GetRgnBox (Address: 0x1805f38a8)
GetStockObject (Address: 0x1805f36e0)
GetTextAlign (Address: 0x1805f3860)
GetTextColor (Address: 0x1805f37d8)
GetTextExtentPoint32A (Address: 0x1805f38e8)
GetTextExtentPoint32W (Address: 0x1805f37e0)
GetTextExtentPointW (Address: 0x1805f36f0)
GetTextMetricsW (Address: 0x1805f37f0)
GetViewportOrgEx (Address: 0x1805f37c8)
GetWindowOrgEx (Address: 0x1805f38b8)
IntersectClipRect (Address: 0x1805f3828)
LineTo (Address: 0x1805f3850)
LPtoDP (Address: 0x1805f3790)
MoveToEx (Address: 0x1805f3848)
OffsetWindowOrgEx (Address: 0x1805f3870)
PatBlt (Address: 0x1805f3840)
PlayMetaFile (Address: 0x1805f37b0)
Rectangle (Address: 0x1805f37a0)
RestoreDC (Address: 0x1805f3890)
SaveDC (Address: 0x1805f3898)
SelectClipRgn (Address: 0x1805f3830)
SelectObject (Address: 0x1805f3720)
SetBkColor (Address: 0x1805f36d0)
SetBkMode (Address: 0x1805f3758)
SetDCBrushColor (Address: 0x1805f3880)
SetLayout (Address: 0x1805f36d8)
SetMapMode (Address: 0x1805f3778)
SetMetaFileBitsEx (Address: 0x1805f3798)
SetStretchBltMode (Address: 0x1805f3838)
SetTextAlign (Address: 0x1805f3800)
SetTextColor (Address: 0x1805f36f8)
SetViewportExtEx (Address: 0x1805f3788)
SetViewportOrgEx (Address: 0x1805f37a8)
SetWindowExtEx (Address: 0x1805f3780)
SetWindowOrgEx (Address: 0x1805f3868)
StretchBlt (Address: 0x1805f3768)
StretchDIBits (Address: 0x1805f37e8)
TextOutA (Address: 0x1805f38f0)

KERNELBASE.dll

ClosePackageInfo (Address: 0x1805f3918)
CloseState (Address: 0x1805f3948)
GetCurrentPackageInfo (Address: 0x1805f3990)
GetEffectivePackageStatusForUser (Address: 0x1805f3938)
GetPackageFullName (Address: 0x1805f3980)
GetPackageInfo (Address: 0x1805f3910)
GetPackagesByPackageFamily (Address: 0x1805f3988)
GetStagedPackagePathByFullName2 (Address: 0x1805f3978)
GetStateFolder (Address: 0x1805f3950)
GetSystemAppDataKey (Address: 0x1805f3920)
IsMrtResourceRedirectionEnabled (Address: 0x1805f3930)
NotifyRedirectedStringChange (Address: 0x1805f3928)
OpenPackageInfoByFullName (Address: 0x1805f3908)
OpenState (Address: 0x1805f3960)
OpenStateExplicit (Address: 0x1805f3958)
PackageNameAndPublisherIdFromFamilyName (Address: 0x1805f3968)
ParseApplicationUserModelId (Address: 0x1805f3970)
SHLoadIndirectStringInternal (Address: 0x1805f3940)

msvcp_win.dll

_Cnd_do_broadcast_at_thread_exit (Address: 0x1805f58b0)
_Thrd_id (Address: 0x1805f58a8)
_Thrd_join (Address: 0x1805f56f8)
_Thrd_yield (Address: 0x1805f5858)
_Xtime_get_ticks (Address: 0x1805f5850)
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x1805f5868)
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x1805f5880)
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x1805f5848)
?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x1805f5870)
?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x1805f5860)
?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x1805f5888)
?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x1805f5890)
?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x1805f5898)
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1805f57c0)
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x1805f57f8)
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x1805f5810)
?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x1805f56f0)
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1805f57d8)
?_Xbad_function_call@std@@YAXXZ (Address: 0x1805f58a0)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1805f5818)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1805f5878)
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x1805f5710)
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x1805f5708)
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x1805f5748)
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1805f57b8)
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1805f5790)
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1805f5798)
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1805f5738)
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1805f5730)
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1805f5720)
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ (Address: 0x1805f5830)
?flags@ios_base@std@@QEBAHXZ (Address: 0x1805f5808)
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x1805f57d0)
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x1805f57a0)
?good@ios_base@std@@QEBA_NXZ (Address: 0x1805f57e8)
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1805f57b0)
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1805f5758)
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1805f5750)
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1805f57a8)
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x1805f5828)
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x1805f5760)
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x1805f5728)
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z (Address: 0x1805f5740)
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x1805f5718)
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x1805f5840)
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x1805f5770)
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x1805f5820)
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x1805f5780)
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x1805f57f0)
?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x1805f5700)
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x1805f57c8)
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x1805f5788)
?uncaught_exception@std@@YA_NXZ (Address: 0x1805f57e0)
?width@ios_base@std@@QEAA_J_J@Z (Address: 0x1805f5838)
?width@ios_base@std@@QEBA_JXZ (Address: 0x1805f5800)
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x1805f5768)
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x1805f5778)

ntdll.dll

EtwEventActivityIdControl (Address: 0x1805f59b0)
EtwEventEnabled (Address: 0x1805f59b8)
EtwEventRegister (Address: 0x1805f59a8)
EtwEventSetInformation (Address: 0x1805f5990)
EtwEventUnregister (Address: 0x1805f59a0)
EtwEventWrite (Address: 0x1805f59c0)
EtwEventWriteTransfer (Address: 0x1805f5998)
EtwGetTraceEnableFlags (Address: 0x1805f5a10)
EtwGetTraceEnableLevel (Address: 0x1805f5a08)
EtwGetTraceLoggerHandle (Address: 0x1805f5a00)
EtwLogTraceEvent (Address: 0x1805f5aa8)
EtwRegisterTraceGuidsW (Address: 0x1805f5a18)
EtwTraceMessage (Address: 0x1805f59c8)
EtwUnregisterTraceGuids (Address: 0x1805f5a20)
NtClose (Address: 0x1805f5920)
NtCreateFile (Address: 0x1805f5918)
NtFsControlFile (Address: 0x1805f5928)
NtMapViewOfSection (Address: 0x1805f5b00)
NtOpenFile (Address: 0x1805f5940)
NtOpenProcessToken (Address: 0x1805f5ae0)
NtOpenThreadToken (Address: 0x1805f5aa0)
NtPowerInformation (Address: 0x1805f59f8)
NtQueryInformationFile (Address: 0x1805f5908)
NtQueryInformationProcess (Address: 0x1805f59e8)
NtQueryInformationThread (Address: 0x1805f5ab0)
NtQueryInformationToken (Address: 0x1805f5ae8)
NtQueryKey (Address: 0x1805f5ab8)
NtQueryObject (Address: 0x1805f5ac0)
NtQuerySystemInformation (Address: 0x1805f5a80)
NtQueryWnfStateData (Address: 0x1805f59d0)
NtSetInformationFile (Address: 0x1805f5938)
NtSetInformationToken (Address: 0x1805f5ad8)
NtUnmapViewOfSection (Address: 0x1805f5af0)
RtlAcquireResourceExclusive (Address: 0x1805f58e0)
RtlCheckRegistryKey (Address: 0x1805f5b10)
RtlCreateEnvironment (Address: 0x1805f5978)
RtlDeleteResource (Address: 0x1805f58c0)
RtlDeriveCapabilitySidsFromName (Address: 0x1805f5a40)
RtlDestroyEnvironment (Address: 0x1805f5988)
RtlDllShutdownInProgress (Address: 0x1805f5a70)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x1805f5948)
RtlEqualSid (Address: 0x1805f5a90)
RtlExpandEnvironmentStrings_U (Address: 0x1805f5970)
RtlFreeHeap (Address: 0x1805f5950)
RtlGetNtProductType (Address: 0x1805f5a30)
RtlGetNtSystemRoot (Address: 0x1805f5b08)
RtlImageNtHeaderEx (Address: 0x1805f5af8)
RtlInitializeResource (Address: 0x1805f58e8)
RtlInitUnicodeString (Address: 0x1805f58f8)
RtlInitUnicodeStringEx (Address: 0x1805f5958)
RtlIsNonEmptyDirectoryReparsePointAllowed (Address: 0x1805f5a60)
RtlIsPartialPlaceholder (Address: 0x1805f5a78)
RtlMapGenericMask (Address: 0x1805f5a28)
RtlNtStatusToDosError (Address: 0x1805f5910)
RtlNtStatusToDosErrorNoTeb (Address: 0x1805f5ac8)
RtlPrefixString (Address: 0x1805f5900)
RtlPublishWnfStateData (Address: 0x1805f59d8)
RtlQueryElevationFlags (Address: 0x1805f5a98)
RtlQueryEnvironmentVariable_U (Address: 0x1805f5960)
RtlQueryRegistryValuesEx (Address: 0x1805f5a88)
RtlQueryResourcePolicy (Address: 0x1805f58f0)
RtlQueryWnfStateData (Address: 0x1805f5ad0)
RtlRandomEx (Address: 0x1805f5a50)
RtlReleaseResource (Address: 0x1805f58d8)
RtlSetCurrentEnvironment (Address: 0x1805f5980)
RtlSetEnvironmentVariable (Address: 0x1805f5968)
RtlSubscribeWnfStateChangeNotification (Address: 0x1805f58d0)
RtlUnicodeStringToOemString (Address: 0x1805f5930)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x1805f58c8)
ShipAssert (Address: 0x1805f5a58)
WinSqmAddToStream (Address: 0x1805f5a38)
WinSqmAddToStreamEx (Address: 0x1805f5a48)
WinSqmIncrementDWORD (Address: 0x1805f59e0)
WinSqmSetDWORD (Address: 0x1805f59f0)
ZwQueryWnfStateData (Address: 0x1805f5a68)

USER32.dll

(Address: 0x1805f3d90)
(Address: 0x1805f3f28)
(Address: 0x1805f3a28)
(Address: 0x1805f3ac8)
(Address: 0x1805f3b30)
(Address: 0x1805f3c38)
ActivateKeyboardLayout (Address: 0x1805f3ba0)
AdjustWindowRect (Address: 0x1805f3dc0)
AdjustWindowRectEx (Address: 0x1805f3e08)
AdjustWindowRectExForDpi (Address: 0x1805f3c20)
AllowSetForegroundWindow (Address: 0x1805f4028)
AnimateWindow (Address: 0x1805f39b8)
AppendMenuW (Address: 0x1805f3d80)
AreDpiAwarenessContextsEqual (Address: 0x1805f42a8)
AttachThreadInput (Address: 0x1805f3e20)
BeginDeferWindowPos (Address: 0x1805f3db8)
BeginPaint (Address: 0x1805f3e78)
BroadcastSystemMessageW (Address: 0x1805f3ca0)
CallNextHookEx (Address: 0x1805f3bf8)
CallWindowProcW (Address: 0x1805f3c70)
ChangeClipboardChain (Address: 0x1805f3d60)
ChangeWindowMessageFilterEx (Address: 0x1805f3eb0)
CheckDlgButton (Address: 0x1805f4188)
CheckMenuItem (Address: 0x1805f3d70)
CheckMenuRadioItem (Address: 0x1805f3d78)
CheckRadioButton (Address: 0x1805f3af0)
ChildWindowFromPoint (Address: 0x1805f39c8)
ClientToScreen (Address: 0x1805f3b00)
CloseClipboard (Address: 0x1805f3cc8)
CloseDesktop (Address: 0x1805f3cf8)
CloseGestureInfoHandle (Address: 0x1805f3d48)
CopyAcceleratorTableW (Address: 0x1805f3df0)
CopyIcon (Address: 0x1805f3fd0)
CopyImage (Address: 0x1805f3e68)
CopyRect (Address: 0x1805f3be0)
CountClipboardFormats (Address: 0x1805f4060)
CreateAcceleratorTableW (Address: 0x1805f3ae0)
CreateDialogIndirectParamW (Address: 0x1805f39d0)
CreateDialogParamW (Address: 0x1805f39d8)
CreateMenu (Address: 0x1805f3d20)
CreatePopupMenu (Address: 0x1805f41a8)
CreateWindowExW (Address: 0x1805f3ed0)
CreateWindowInBand (Address: 0x1805f3d08)
CreateWindowIndirect (Address: 0x1805f3bc0)
DdeCreateDataHandle (Address: 0x1805f3a88)
DdeCreateStringHandleW (Address: 0x1805f3a80)
DdeDisconnect (Address: 0x1805f3a68)
DdeFreeStringHandle (Address: 0x1805f3a78)
DdeGetData (Address: 0x1805f3a98)
DdeGetLastError (Address: 0x1805f3a90)
DdeInitializeW (Address: 0x1805f3a50)
DdeNameService (Address: 0x1805f3a60)
DdeQueryConvInfo (Address: 0x1805f3aa0)
DdeQueryStringW (Address: 0x1805f3a70)
DdeUninitialize (Address: 0x1805f3a58)
DeferWindowPos (Address: 0x1805f3de0)
DefWindowProcA (Address: 0x1805f3e28)
DefWindowProcW (Address: 0x1805f40f8)
DeleteMenu (Address: 0x1805f4198)
DeregisterShellHookWindow (Address: 0x1805f3e40)
DestroyAcceleratorTable (Address: 0x1805f3de8)
DestroyIcon (Address: 0x1805f41d8)
DestroyMenu (Address: 0x1805f41a0)
DestroyWindow (Address: 0x1805f40c0)
DialogBoxIndirectParamW (Address: 0x1805f39e0)
DialogBoxParamW (Address: 0x1805f3c88)
DispatchMessageW (Address: 0x1805f41c0)
DisplayConfigGetDeviceInfo (Address: 0x1805f3a38)
DrawEdge (Address: 0x1805f3d58)
DrawFocusRect (Address: 0x1805f41e0)
DrawIcon (Address: 0x1805f41e8)
DrawIconEx (Address: 0x1805f4298)
DrawTextExW (Address: 0x1805f3b18)
DrawTextW (Address: 0x1805f4000)
EmptyClipboard (Address: 0x1805f3a18)
EnableMenuItem (Address: 0x1805f4078)
EnableWindow (Address: 0x1805f42b8)
EndDeferWindowPos (Address: 0x1805f3db0)
EndDialog (Address: 0x1805f41f8)
EndMenu (Address: 0x1805f3d28)
EndPaint (Address: 0x1805f3e70)
EnumChildWindows (Address: 0x1805f3cc0)
EnumDisplayDevicesW (Address: 0x1805f3f58)
EnumDisplayMonitors (Address: 0x1805f3ad8)
EnumDisplaySettingsW (Address: 0x1805f3ab0)
EnumPropsExW (Address: 0x1805f3ec0)
EnumWindows (Address: 0x1805f3fd8)
EqualRect (Address: 0x1805f3ef0)
ExitWindowsEx (Address: 0x1805f40a8)
FillRect (Address: 0x1805f4010)
FindWindowExW (Address: 0x1805f3ba8)
FindWindowW (Address: 0x1805f4108)
GetAncestor (Address: 0x1805f4120)
GetAsyncKeyState (Address: 0x1805f3f20)
GetCapture (Address: 0x1805f3b88)
GetClassInfoExW (Address: 0x1805f3c68)
GetClassInfoW (Address: 0x1805f3e58)
GetClassLongPtrW (Address: 0x1805f3ab8)
GetClassLongW (Address: 0x1805f39f8)
GetClassNameW (Address: 0x1805f4110)
GetClientRect (Address: 0x1805f4220)
GetClipboardData (Address: 0x1805f3cd8)
GetClipboardOwner (Address: 0x1805f4070)
GetComboBoxInfo (Address: 0x1805f3e98)
GetCurrentInputMessageSource (Address: 0x1805f4290)
GetCursor (Address: 0x1805f4288)
GetCursorPos (Address: 0x1805f40d8)
GetDC (Address: 0x1805f3f98)
GetDesktopWindow (Address: 0x1805f3f88)
GetDialogBaseUnits (Address: 0x1805f3b58)
GetDisplayConfigBufferSizes (Address: 0x1805f39e8)
GetDlgCtrlID (Address: 0x1805f3dc8)
GetDlgItem (Address: 0x1805f4240)
GetDlgItemInt (Address: 0x1805f3b08)
GetDlgItemTextW (Address: 0x1805f4268)
GetDoubleClickTime (Address: 0x1805f3f38)
GetDpiForSystem (Address: 0x1805f3c90)
GetDpiForWindow (Address: 0x1805f3c98)
GetFocus (Address: 0x1805f40b0)
GetForegroundWindow (Address: 0x1805f3f18)
GetGestureInfo (Address: 0x1805f3d50)
GetIconInfo (Address: 0x1805f3eb8)
GetKeyboardLayout (Address: 0x1805f3fb0)
GetKeyState (Address: 0x1805f4080)
GetLastActivePopup (Address: 0x1805f40c8)
GetLastInputInfo (Address: 0x1805f3bf0)
GetMenuDefaultItem (Address: 0x1805f4090)
GetMenuInfo (Address: 0x1805f3a20)
GetMenuItemCount (Address: 0x1805f40a0)
GetMenuItemID (Address: 0x1805f4040)
GetMenuItemInfoW (Address: 0x1805f4098)
GetMenuState (Address: 0x1805f4058)
GetMenuStringW (Address: 0x1805f4088)
GetMessageExtraInfo (Address: 0x1805f3d30)
GetMessagePos (Address: 0x1805f3a08)
GetMessageTime (Address: 0x1805f3af8)
GetMessageW (Address: 0x1805f41d0)
GetMonitorInfoW (Address: 0x1805f3f00)
GetParent (Address: 0x1805f4178)
GetPointerDevices (Address: 0x1805f3be8)
GetProcessDefaultLayout (Address: 0x1805f3a00)
GetPropW (Address: 0x1805f3fe0)
GetScrollInfo (Address: 0x1805f3f70)
GetShellWindow (Address: 0x1805f3ca8)
GetSubMenu (Address: 0x1805f4168)
GetSysColor (Address: 0x1805f41f0)
GetSysColorBrush (Address: 0x1805f4008)
GetSystemMenu (Address: 0x1805f3c10)
GetSystemMetrics (Address: 0x1805f4228)
GetSystemMetricsForDpi (Address: 0x1805f3bb0)
GetTaskmanWindow (Address: 0x1805f3e50)
GetUpdateRect (Address: 0x1805f3b90)
GetWindow (Address: 0x1805f4100)
GetWindowBand (Address: 0x1805f3ec8)
GetWindowDC (Address: 0x1805f3bd0)
GetWindowDpiAwarenessContext (Address: 0x1805f3e10)
GetWindowLongPtrW (Address: 0x1805f4200)
GetWindowLongW (Address: 0x1805f3f80)
GetWindowPlacement (Address: 0x1805f3cb0)
GetWindowRect (Address: 0x1805f40e0)
GetWindowTextLengthW (Address: 0x1805f3e60)
GetWindowTextW (Address: 0x1805f4210)
GetWindowThreadProcessId (Address: 0x1805f3fb8)
HideCaret (Address: 0x1805f39a0)
InflateRect (Address: 0x1805f3f78)
InsertMenuItemW (Address: 0x1805f3d68)
InsertMenuW (Address: 0x1805f4038)
IntersectRect (Address: 0x1805f3ef8)
InvalidateRect (Address: 0x1805f4248)
IsChild (Address: 0x1805f3f40)
IsDialogMessageW (Address: 0x1805f3c30)
IsDlgButtonChecked (Address: 0x1805f4180)
IsHungAppWindow (Address: 0x1805f4068)
IsIconic (Address: 0x1805f3fc0)
IsMenu (Address: 0x1805f4020)
IsRectEmpty (Address: 0x1805f3c58)
IsSETEnabled (Address: 0x1805f3ee0)
IsWindow (Address: 0x1805f3fc8)
IsWindowEnabled (Address: 0x1805f3cf0)
IsWindowUnicode (Address: 0x1805f3e30)
IsWindowVisible (Address: 0x1805f3f10)
IsWinEventHookInstalled (Address: 0x1805f3a10)
KillTimer (Address: 0x1805f4118)
LoadAcceleratorsW (Address: 0x1805f3df8)
LoadCursorW (Address: 0x1805f4250)
LoadIconW (Address: 0x1805f3e80)
LoadImageW (Address: 0x1805f3c40)
LoadMenuW (Address: 0x1805f4160)
LockSetForegroundWindow (Address: 0x1805f39b0)
MapDialogRect (Address: 0x1805f3e90)
MapWindowPoints (Address: 0x1805f3e88)
MessageBeep (Address: 0x1805f4030)
MessageBoxW (Address: 0x1805f3dd8)
ModifyMenuW (Address: 0x1805f4050)
MonitorFromPoint (Address: 0x1805f3d98)
MonitorFromRect (Address: 0x1805f3ea8)
MonitorFromWindow (Address: 0x1805f3f08)
MoveWindow (Address: 0x1805f3e00)
MsgWaitForMultipleObjects (Address: 0x1805f3cb8)
MsgWaitForMultipleObjectsEx (Address: 0x1805f4130)
NotifyWinEvent (Address: 0x1805f3da0)
OffsetRect (Address: 0x1805f3f50)
OpenClipboard (Address: 0x1805f3ce0)
OpenInputDesktop (Address: 0x1805f3d00)
PeekMessageW (Address: 0x1805f4138)
PostMessageW (Address: 0x1805f41b0)
PostQuitMessage (Address: 0x1805f4140)
PostThreadMessageW (Address: 0x1805f3c18)
PtInRect (Address: 0x1805f3ff8)
QueryDisplayConfig (Address: 0x1805f39f0)
RedrawWindow (Address: 0x1805f3ce8)
RegisterClassExW (Address: 0x1805f3f68)
RegisterClassW (Address: 0x1805f40f0)
RegisterClipboardFormatW (Address: 0x1805f40e8)
RegisterPowerSettingNotification (Address: 0x1805f3da8)
RegisterShellHookWindow (Address: 0x1805f3e38)
RegisterWindowMessageA (Address: 0x1805f3b50)
RegisterWindowMessageW (Address: 0x1805f3ee8)
ReleaseCapture (Address: 0x1805f3b80)
ReleaseDC (Address: 0x1805f3f90)
RemoveMenu (Address: 0x1805f4170)
RemovePropW (Address: 0x1805f3fe8)
ScreenToClient (Address: 0x1805f4278)
SendDlgItemMessageW (Address: 0x1805f4270)
SendMessageTimeoutW (Address: 0x1805f3fa8)
SendMessageW (Address: 0x1805f4280)
SendNotifyMessageW (Address: 0x1805f3fa0)
SetActiveWindow (Address: 0x1805f3ea0)
SetCapture (Address: 0x1805f3b78)
SetClipboardData (Address: 0x1805f3cd0)
SetClipboardViewer (Address: 0x1805f3d10)
SetCoalescableTimer (Address: 0x1805f3b20)
SetCursor (Address: 0x1805f4258)
SetDialogDpiChangeBehavior (Address: 0x1805f3c28)
SetDlgItemInt (Address: 0x1805f3b10)
SetDlgItemTextA (Address: 0x1805f3dd0)
SetDlgItemTextW (Address: 0x1805f4260)
SetFocus (Address: 0x1805f40b8)
SetForegroundWindow (Address: 0x1805f4148)
SetGestureConfig (Address: 0x1805f3d40)
SetLayeredWindowAttributes (Address: 0x1805f3bc8)
SetMenu (Address: 0x1805f39c0)
SetMenuDefaultItem (Address: 0x1805f4048)
SetMenuInfo (Address: 0x1805f3bd8)
SetMenuItemInfoW (Address: 0x1805f4018)
SetMessageExtraInfo (Address: 0x1805f3d88)
SetParent (Address: 0x1805f3c60)
SetProcessDPIAware (Address: 0x1805f41b8)
SetProgmanWindow (Address: 0x1805f3ad0)
SetPropW (Address: 0x1805f3ff0)
SetRect (Address: 0x1805f3c50)
SetRectEmpty (Address: 0x1805f3c80)
SetScrollInfo (Address: 0x1805f3b40)
SetScrollPos (Address: 0x1805f3b28)
SetShellWindow (Address: 0x1805f3ac0)
SetSysColors (Address: 0x1805f3a30)
SetTaskmanWindow (Address: 0x1805f3e48)
SetThreadDpiAwarenessContext (Address: 0x1805f3e18)
SetTimer (Address: 0x1805f4190)
SetWindowCompositionAttribute (Address: 0x1805f3f60)
SetWindowLongPtrW (Address: 0x1805f4208)
SetWindowLongW (Address: 0x1805f3c78)
SetWindowPos (Address: 0x1805f4218)
SetWindowRgn (Address: 0x1805f3b48)
SetWindowsHookExW (Address: 0x1805f3c08)
SetWindowTextW (Address: 0x1805f4238)
ShowCaret (Address: 0x1805f39a8)
ShowScrollBar (Address: 0x1805f3b38)
ShowWindow (Address: 0x1805f4230)
ShutdownBlockReasonCreate (Address: 0x1805f4158)
ShutdownBlockReasonDestroy (Address: 0x1805f4150)
SubtractRect (Address: 0x1805f3bb8)
SwitchToThisWindow (Address: 0x1805f40d0)
SystemParametersInfoA (Address: 0x1805f3b68)
SystemParametersInfoForDpi (Address: 0x1805f3b60)
SystemParametersInfoW (Address: 0x1805f3ed8)
TrackMouseEvent (Address: 0x1805f3b98)
TrackPopupMenu (Address: 0x1805f42b0)
TrackPopupMenuEx (Address: 0x1805f3c48)
TranslateAcceleratorW (Address: 0x1805f3d18)
TranslateMessage (Address: 0x1805f41c8)
UnhookWindowsHookEx (Address: 0x1805f3c00)
UnionRect (Address: 0x1805f3f48)
UnpackDDElParam (Address: 0x1805f3a48)
UnregisterPowerSettingNotification (Address: 0x1805f4128)
UpdateLayeredWindow (Address: 0x1805f3f30)
UpdateWindow (Address: 0x1805f3d38)
WaitMessage (Address: 0x1805f3aa8)
WindowFromDC (Address: 0x1805f42a0)
WindowFromPoint (Address: 0x1805f3ae8)
WinHelpW (Address: 0x1805f3b70)
wsprintfW (Address: 0x1805f3a40)